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Preface 


About This Guide 

This guide documents the ComOS™ Command Line Interface—also known as the 
CLI —available on all Livingston PortMaster™ products. 

You can also configure the PortMaster with the graphical user interfaces (GUIs) 
PMconsole™ for Windows and PMconsole for UNIX. Each has its own administrator's 
guide. 

Information in this guide is current for the following releases: 


PortMaster Release 

PortMaster Product 

Release 3.5 

PortMaster 2 Communications Servers (PM-2 series) 


PortMaster 3 Integrated Access Servers (PM-3 series) 

Release 3.6L 

PortMaster Office Routers (OR series) 

Release 3.6R 

PortMaster Internetwork Routers (IRX series) 


If you are running a later release of ComOS, see the release notes for changes. If you are 
running an earlier release of ComOS, some commands might not be available or might 
produce different output. 

This guide is designed to be used by qualified system administrators and network 
managers. 

Refer to your hardware installation guide for information on attaching a console before 
attempting to configure your PortMaster with the Command Line Interface. 


About This Guide 
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Preview of This Guide 

This guide provides the information you need to use the Command Line Interface to 
configure your PortMaster. For more detailed configuration information, see the 
Configuration Guide for PortMaster Products . 

This guide includes the following chapters. An index of commands and a subject index 
appear at the end. 

Chapter 1, "Installing the PortMaster," describes the procedure for assigning an IP 
address to a PortMaster. Further configuration can be done from the console or by 
using Telnet to connect to the PortMaster across the network. 

Chapter 2, "Introduction," provides an overview of the Command Line Interface. 

Chapter 3, "General Commands," describes all the commands to administer the 
PortMaster, other than configuration commands. 

Chapter 4, "Global Configuration," describes how to use the Command Line Interface 
to set global parameters on the PortMaster, including default and alternate hosts, 
gateway and metric, and name service. Remote Authentication Dial-In User Service 
(RADIUS), ChoiceNet, Netmask, and Simple Network Management Protocol (SNMP) 
Table configuration commands are also described. 

Chapter 5, "Ethernet Interface," describes how to use the Command Line Interface to 
configure Ethernet interfaces. 

Chapter 6, "Asynchronous Ports," describes how to use the Command Line Interface 
to configure asynchronous ports. Modem Table configuration commands are also 
described. 

Chapter 7, "Synchronous Ports," describes how to use the Command Line Interface to 
configure synchronous ports. 

Chapter 8, "Parallel Port," describes how to use the Command Line Interface to 
configure the parallel port. 

Chapter 9, "ISDN BRI Ports," describes how to use the Command Line Interface to 
configure ISDN Basic Rate Interface (BRI) ports. 

Chapter 10, "Configuring the PortMaster 3," describes how to configure the Primary 
Rate Interface (PRI) El or T1 lines of the PortMaster 3. 
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Chapter 11, "Configuring OSPF," describes how to configure the PortMaster for using 
the Open Shortest Path First (OSPF) routing protocol. 

Chapter 12, "User Table/' describes how to use the Command Line Interface to 
configure the User Table for dial-in users. If you are using RADIUS instead of or in 
addition to the User Table, refer to Chapter 4 in this guide for information on 
configuring the PortMaster as a RADIUS client, and refer to the RADIUS 
Administrator's Guide for information on setting up a RADIUS server. 

Chapter 13, "Location Table and DLCI Table," describes how to use the Command 
Line Interface to configure the Location Table for dial-out locations. 

Chapter 14, "Filter Table," describes how to use the Command Line Interface to create, 
edit and delete filters in the Filter Table. 

Chapter 15, "Static Route Table and Host Table," describes how to use the Command 
Line Interface to configure the Static Route Table and the Host Table. 

Related Documentation 

The hardware installation guide gives instructions for installing your specific product 
on the network. Use the hardware installation guide before you attempt to configure 
the PortMaster. 

The Configuration Guide for PortMaster Products provides an overview of network 
applications and configuration for PortMaster products. 


Related Documentation 


xxi 






Document Conventions 


The following table describes the typeface changes and symbols used in this guide. 


Typeface or 
Symbol 

Meaning 

Example 

Regular font 

The normal text typeface 

This is the default. 

Regular font, in 

"quotation 

marks" 

The names of commands, 
parameters, and directories, 
when used in body text. 

Use "version" to display the 
version number. 

Italic font 

Command-line placeholder: 
replace with a real name or 

To set the IP address of the 
Ethernet interface: 


value. 

set Ether0 address Ipaddress 

Regular font in 
[brackets] 

In command syntax, optional 
keywords or values that you 
can use in commands. 

set nameserver [2] Ipaddress 

Use the optional parameter to 
set an alternative name server. 


In body text, a key to press. 

Password: [Enter] 

Vertical bar (1) 

Separates two or more 
possible options in a 
command. 

set debug isdn on 1 off 
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Command Description Format 

Configuration commands are presented chapter-by-chapter by interface or table. Each 
command is documented in the following standard format: 


Telnet 

This command sets the Telnet administrative port, 
set telnet Tport 

Tport Telnet administrative port. Default is 23. 

Usage 

This value allows the administrator to use the telnet protocol to 
maintain the PortMaster. The value can be any number from 0 to 
65535. If set to 0, the PortMaster disables the telnet administration 
function. Ports numbered 10000 through 10100 are reserved and 
should not be used for this function. 

Example 

Command> set telnet 23 

Setting Telnet Administration port to 23 

See Also 

set maximum pmconsole - page 4-14 
set serial-admin - page 4-15 
telnet - page 3-12 


This standard format includes the following elements: 

• The command name—"Telnet" in the example—followed by a brief description of 
its function. 


Command Description Format 


xxiii 








• The command line syntax—"set telnet Tport" in the example—with any values 
(like "Tport") that must be replaced by a valid port number when you give the 
command. 

• A description of any values— "Tport" in the example—and values and keywords 
used in the command line. PortMaster defaults are also indicated here. 

• The Usage section with specific information, such as limitations or ranges for the 
values, together with background information to help you understand how to use 
the command. See the Configuration Guide for PortMaster Products for more detailed 
background information. 

• The Example section with the "Command>" prompt followed by an example of 
how to type the command, and the response from the PortMaster after you press 
[Enter]. For more complex commands, such as in those in Chapter 14, "Filter 
Table," several detailed examples are given. 

• The See Also section lists related commands. 

Contacting Livingston Technical Support 

Every Livingston product comes with a one year hardware warranty. 

To obtain technical support, contact Livingston Enterprises Monday through Friday 
between the hours of 6 a.m. and 5 p.m. (GMT -8). Please record your Livingston 
ComOS version number and report it to the technical support staff. 

• By voice, dial (800) 458-9966 within the USA (including Hawaii), Canada, and the 
Caribbean, or +1 (510) 426-0770 from elsewhere. 

• By FAX, dial +1 (510) 426-8951. 

• By electronic mail, send mail to "support@livingston.com." 

• Using the World Wide Web, see "http://www.livingston.com/." 

You can schedule one-hour installation appointments in advance by calling the 
technical support telephone number listed above. 

New releases and upgrades of Livingston software are available via anonymous FTP 
from "ftp.livingston.com." 
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Livingston maintains the following Internet mailing lists for PortMaster users: 


• portmaster-users 

A discussion of general and specific PortMaster issues, including configuration and 
troubleshooting suggestions. To subscribe, send electronic mail to 
"majordomo@livingston.com" with "subscribe portmaster-users" in the body of 
the message. 

The mailing list is also available in a daily digest format. To receive the digest, send 
electronic mail to "majordomo@livingston.com" with "subscribe 
portmaster-users-digest" in the body of the message. 

• portmaster-radius 

A discussion of general and specific RADIUS issues, including configuration and 
troubleshooting suggestions. To subscribe, send electronic mail to 
"majordomo@livingston.com" with "subscribe portmaster-radius" in the body of 
the message. 

The mailing list is also available in a daily digest format. To receive the digest, send 
electronic mail to "majordomo@livingston.com" with "subscribe 
portmaster-radius-digest" in the body of the message. 

• portmaster-announce 


Announcements of new PortMaster products and software releases. To subscribe, 
send electronic mail to "majordomo@livingston.com" with "subscribe 
portmaster-announce" in the body of the message. All announcements to this list 
also go to the portmaster-users list. You do not need to subscribe to both lists. 


Contacting Livingston Technical Support 
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Installing the PortMaster 


1 


The Command Line Interface provides a non-graphical user interface for administering 
Livingston PortMaster Communications Servers (PM-2 series). Internetwork Routers 
(IRX series). Office Routers (OR series), and Integrated Access Servers (PM-3 series). 
This interface does not require any software to be installed. You can access this 
interface either directly through the asynchronous ports on the PortMaster, or by 
connecting via Telnet to the PortMaster once an IP address (or IPX network) is set on it. 
Up to four concurrent administrative Telnet sessions are allowed by default. 

The hardware installation guide describes how to connect to the network and console; 
that information is also included here. 


The following procedure walks you step-by-step through the basic PortMaster 
installation: 


1. Set the power switch on the PortMaster to OFF. 

2. Attach the power cord to the PortMaster and to a properly grounded electrical 
outlet. 


3. Attach an RS-232 serial null modem cable to PortMaster port CO (or SO if there is 
no CO) and the serial port of a PC or ASCII terminal, and raise dual in-line package 
(DIP) switch 1. 


The terminal should be set for 9600 bps, 8 data bits, 1 stop bit, no parity. 

4. If connecting to a network, you may connect the lOBaseT, attachment unit interface 
(AUI), or BNC Ethernet port on the PortMaster to an Ethernet hub or transceiver, 
using the appropriate cable. For information on setting the Ethernet DIP switches, 
refer to the hardware installation guide. 



Warning - Before you apply power, refer to "Safety Recommendations" and "Power 
Guidelines" in the hardware installation guide for the Livingston product you are 
installing. 


5. Set the power switch to ON. 

The Ethernet cable does not come with the PortMaster. 
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6. Verify that the System LED is active. 

While the PortMaster is booting, the LED blinks three times per second, then once 
per second. The LED blinks OFF once every five seconds during normal operation. 

If the System LED does not behave in this way, see the information on hardware 
problems and solutions in the hardware installation guide. 

7. Verify that the Link LED is ON, if you are using lOBaseT. 

This LED is solidly lit when lOBaseT link integrity exists. When the Link LED is 
OFF, a lOBaseT link error has been detected. 

If the Link LED does not behave in this way, see the information on hardware 
problems and solutions in the hardware installation guide. 

The Link LED is not used for link status for the AUI or BNC connectors. 

8. Verify that the Network LED is ON when Ethernet traffic is present. 

The Network LED blinks once for every packet transmitted or received. In heavy 
traffic situations, the LED may appear solid. 

If the Network LED does not behave in this way, see the information on hardware 
problems and solutions in the hardware installation guide. 

9. Once the PortMaster has booted and all connections are verified, the console (PC or 
terminal) displays a login prompt. 

10. Log in and enter your password: 

login: Iroot 
Password: [Enter] 


11. Set the IP address, if you are using IP. 

Replace the italicized values with the appropriate values for your network. 

Command> set etherO address 192.168.200.1 
Command> save all 
Command> quit 
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12. Set the IPX network address and Ethernet protocol, if you are using IPX. 
Replace the italicized values with the appropriate values for your network. 

Command> set etherO ipxnet AFAF0808 
Command> set etherO ipxframe ethernet_802.2 
Command> save all 
Command> quit 


13. If you are planning to use the Command Line Interface to configure your 

PortMaster, you can do so now. If you are planning to use PMconsole to configure 
your PortMaster, you can disconnect the terminal from the CO or SO port now, and 
put away this manual. 

For configuration information, refer to the Configuration Guide for PortMaster Products. 
Once you have decided which administrative interface you want to use, refer to the 
administrator's guide for that interface. 
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Introduction 


2 


The Command Line Interface can be used to administer any Livingston PortMaster 
Communications Server (PM-2 series). Internetwork Router (IRX series). Office Router 
(OR series), or Integrated Access Server (PM-3 series). When the name PortMaster is 
used in this guide, it can refer to any of these PortMaster models. 

This chapter provides a summary of PortMaster configurable ports, by model. It also 
describes how to start the Command Line Interface and reboot the PortMaster, and 
provides an overview of PortMaster commands and arguments. 

PortMaster Configurable Ports 

The Command Line Interface can be used to configure your PortMaster ports. Table 2-1 
lists the configurable ports by PortMaster model. 


Table 2-1 Available Port Types by PortMaster Model 





Ports 



Model 

Ethernet 

Asynchronous 

Synchronous Parallel 

BRI U 

BRI S/T 

OR-M 

etherO 

sO-l 




OR-ST 

etherO 

sO 



sl-s2 

OR-U 

etherO 

sO 


sl-s2 


OR-LS 

etherO 

sO 

wl 



OR-HS 

etherO 

sO 

wl 



PM-2 

etherO 

sO-9 

P 0 



PM-2E-10 

etherO 

sO-9 

po 



PM-2E-20 

etherO 

sO-19* 

pO 

slO-19* 

slO-19* 


PortMaster Configurable Ports 


2-1 










Introduction- 


Table 2-1 Available Port Types by PortMaster Model (Continued) 


Model 



Ports 



Ethernet 

Asynchronous 

Synchronous Parallel 

BRIU 

BRI S/T 

PM-2E-30 

etherO 

sO-29* 

pO 

slO-29* 

slO-29* 

PM-2ER-10 

etherO 

sO-9 

wl 



PM-2ER-20 

etherO 

sO-19* 

wl 

slO-19* 

slO-19* 

PM-2ER-30 

etherO 

sO-29* 

wl 

slO-29* 

slO-29* 

PM-2R 

etherO 

sO-9 

wl 



PM-25 

etherO 

s0-24 f 




PM-2i-U 

etherO 

cO 


sO-9 


PM-2i-ST 

etherO 

cO 



sO-9 

PM-2E-10I-U 

etherO 

cO 


sO-29* 


PM-2E-10I-ST 

etherO 

cO 



sO-29* 

IRX-111 

etherO 

sO 

si 



IRX-112 

etherO 

sO 

sl-2 



IRX-114 

etherO 

sO 

sl-4 



IRX-211 

etherO-1 

sO 

si 



PM-3* 

etherO 

cO 





* Ports slO-19 are ISDN B channels if a MOD-IOI-U or MOD-IOI-ST board is placed in the first expansion slot. Ports s20-29 are ISDN B channels if a 
MOD-IOI-U or MOD-IOI-ST board is placed in the second expansion slot, 
t A sin gie asynchronous serial port (SO) is provided, as weU as three high-density 68-pin connectors, each of which supports eight asynchronous 
serial devices. 

t The PortMaster 3 Integrated Access Server has one or two El or T1PRI lines that can be used as ISDN PRIB channels, digital modems, leased 
lines, or Frame Relay connections. See the PortMaster 3 Installation Guide for details. 
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Accessing the Command Line Interface 

To access the Command Line Interface: 

1. Connect via Telnet to the PortMaster or connect to an asynchronous port, and log 
in as follows: 


Login: iroot 
Password: Password 
Command> 



Password is the PortMaster administrative password. Table 2-2 lists commands that 
are described in more detail in the following chapters. 

Note - If you are unable to log in to your PortMaster, refer to the information on how 
the PortMaster works, and the troubleshooting section in the Configuration Guide for 
PortMaster Products. 


Table 2-2 lists the basic PortMaster commands. Some are complete commands; others 
require additional keywords or values as described in following chapters. 

Table 2-2 User Commands 


Command 

Description 

add 

Adds an entry to a PortMaster table. 

delete 

Deletes an entry from a PortMaster table. 

dial 

Begins dialing to the specified network location. 

help 

Provides information on each of the commands, including 
usage and syntax. 

ifconfig 

Displays configuration values for all interfaces and allow 
modification of active values. 

ip 

Sets the default environment to IP. 

ipx 

Sets the default environment to IPX. 

ping 

Sends Internet Control Message Protocol (ICMP) echo request 
packet to test connectivity. 
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Table 2-2 User Commands (Continued) 


Command 

Description 

pmlogin 

Establishes a login using the PortMaster login service to a 
specified host on the network. 

ptrace 

Displays packet traffic passing through the PortMaster, using 
the specified filter. 

quit, done, exit 

reboot 

Exits the command line interface. 

Reboots, using the currently saved configuration. 

reset 

Resets a specific port (or ports) to the current default 
configuration, and drops any active sessions on the port. 

rlogin 

Establishes a login using the rlogin service to a specified host on 
the network. 

save 

Writes the current configuration to PortMaster nonvolatile 
memory. 

set 

Sets the indicated serial port, Ethernet port, global parameter, or 
table parameters. 

show 

Shows the status of each specified port, all ports, global 
configuration, or table. 

telnet 

Connects via Telnet from the PortMaster to a specified host on 
the network. 

traceroute 

Traces network routes to show connectivity path. 

version 

n 

Displays the version number of the ComOS software that runs 
the PortMaster, and the uptime since the last boot. 

Repeats the last command. 


2. Configure your PortMaster, referring to the port-specific or table-specific chapters 
in this guide and the Configuration Guide for PortMaster Products. 
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Rebooting a PortMaster 

You must reboot a PortMaster to change the Ethernet IP address, IPX network address, 
Ethernet protocol, or ISDN switch, or to run an upgrade loaded into Flash RAM earlier, 
as follows: 



Command> reboot 


Note - Rebooting performs a soft reboot that takes approximately 30 seconds. This 
process resets all active ports to their saved configurations, disconnecting all active 
sessions. Any changes made since a "save" command was last issued will be lost when 
you reboot, unless you first save them. 


Command Values 

Table 2-3 describes the different kinds of values that are used in Command Line 
Interface commands. These values must be replaced in the commands with appropriate 
values for your specific needs. For example in the command "add filter Filtername" 
replacing the value Filtername with the name "inet.in" adds a new filter named 
"inet.in" to the filter table. 


Table 2-3 Command Line Values 


Value 

Represents 

Format and/or Value(s) 

Area 

Cgroup 

Channel-list 

OSPF area. 

Group of channels. 

Series of one or more 
channel numbers. 

Decimal or dotted quad notation. 

"w2" through "w63." 

• For Tl, any number(s) from 1 
through 24, separated by spaces. 

Device 

Name of network device 
or pseudo-tty on a UNIX 
host. 

• For El, any number(s) from 1 
through 30, separated by spaces. 

/dev/ttypO, or /dev/network 

EtherO 

Ethernet port. 

• "etherO" or "etherl" on an IRX-211. 



• // ether0"on all others. 



Defaults to "etherO" if omitted. 
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Table 2-3 Command Line Values (Continued) 


Value 

Represents 

Format and/or Value(s) 

Filtemame 

Name of input or output 
packet filter. 

String of up to 12 printable ASCII 

characters. 

Group 

Number of group. 

Integer from 0 to 99; 0 is default. 

Handle 

Network identifier. 

"n" followed by a number, with no 
space in between. 

Hex 

Number in hexadecimal 
(hex) notation. 

Hex number with leading "Ox." 

Interface 

Interface specification. 

For example, "etherO," "frml," 

"ptpl," "frmwl," or "ptpwl." 

Ipaddress 

IP address or host name. 

Address is in dotted quad notation. 

Ipmask 

IP subnet mask—also 
called a netmask . 

Dotted quad notation with l's in high- 
order bits, and 0's in low-order bits. 

Ipxaddress 

IPX address. 

Hex notation in following format: 
Ipxnetworhnode 

Ipxnetwork 

IPX network number. 

32-bit hex number. 

Ipxsock 

The port number for the 

IPX socket. 

Integer from 0 to 65535. 

(type 

ICMP packet type. 

0 or higher. 

LineO 

T1 or El ISDN PRI line on 
a PortMaster 3. 

"lineO" or "linel." 

Locname 

Name of internetwork 
dial-out destination. 

String of up to 12 printable ASCII 
characters. 

MO 

Digital modem number. 

"mO" through "m59." 

MTU 

Maximum transmission 
unit. Maximum packet 
size, in bytes, that an 
interface can send. 

Integer from 100 to 1520. 

Metric 

Hop count to remote 
destination. 

Integer from 1 to 15. Defaults to 1. 

Minutes 

Number of minutes. 

Integer from 0 to 240; note that 1 has 
special meaning. 
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Table 2-3 Command Line Values (Continued) 

Value Represents Format and/or Value(s) 


ModemName 

User-defined long or short 
name for a modem in the 
Modem Table. 

NM 

Alternative netmask 
notation. Number of high- 
order bits set to 1. 

Number 

Quantity. 

Password 

PortMaster administrative 
password. 

RuleNumber 

Number indicating the 
order of a filter rule. 

so 

Any asynchronous port. 

SI 

Any asynchronous or 
synchronous port. 

SlO 

Any ISDN port. 

Seconds 

Number of seconds. 

String 

Character string. 

Tport 

TCP/IP port. 


Printable ASCII characters. 

"/n" where "n" is an integer from 0 to 

32. 

Any number 0 or higher. 

String of up to 16 printable ASCII 

characters. 

Integer 1 or higher. 

• "cO" or "sO" through "s29," 
depending on PortMaster model. 

• "all"—Applies the command 
simultaneously to all asynchronous 
ports. 

• "sO" through "s29" or "wl," 
depending on PortMaster model. 

• "all"—Applies the command 
simultaneously to all asynchronous 
or synchronous ports. 

Depending on PortMaster model: 

• "si" through "s2." 

• "sO" through "s29." 

• "slO" through "s29." 

Any number 0 or higher. 

One or more characters in ASCII 

printable character set. 

Integer from 0 to 65535. 
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Table 2-3 Command Line Values (Continued) 


Value 

Represents 

Format and/or Value(s) 

Ticks 

Number of 50-ms 
increments of time 
required to send a packet 
to the destination 
network. 

Integer. 

Uport 

User Data Protocol 
(UDP)/IP port. 

Integer from 0 to 65535. 

Username 

Name of user. 

String of up to 8 printable ASCII 
characters. 

m 

Any synchronous port. 

• "si" through "s4" or "wO" through 
"w63," depending on PortMaster 
model. 

• "all"—Applies the command 
simultaneously to all synchronous 
ports. 
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3 


Table 3-1 lists commands for troubleshooting, general administration, and displaying 
the configuration of the PortMaster. Definition of these commands—except OSPF 
commands—follow the table. For OSPF commands see the pages indicated in the table. 

Table 3-1 General Commands 

Command Syntax 

version 

reboot 

done 

quit 

exit 

help 

ifconfig [Interface] [address Ipaddress] [netmask Ipmask] [destination Ipaddress(dest)] 

[ipxnet Ipxnetwork] [ipxframe ethemet_802.21 ethemet_802.31 ethemet_802.2_ii I ethemetji] 

[up] [down] [private] [-private] 

dial Locname [-x] 
ping [Ipaddress] 
traceroute [Ipaddress] 
ptrace [Filtername] 
pmlogin Ipaddress 
rlogin Ipaddress 
telnet Ipaddress 
set debug Hex 

set debug isdn I termination on I off 

set debug ospf-hello I ospf-event I ospf-lsu I ospf-lsa I ospf-max on I off - see page 11-24 
erase all-flash I comos I configuration 
erase file String 
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Table 3-1 General Commands (Continued) 

Command Syntax ___ 

erase partition Number 
set console [SO I pO] 
tftp get Ipaddress String 

save EfhetO I SO IW31 all I gobal I console I filter I host I location I netmask I pO I route I snmp I user I ospf 
reset SO IW11 all I console I dialer I nic I pO I Handle I ospf 
set sysname String 
show all 

show arp Interface 
show EtherO 
show files 
show global 
show ipxroutes 
show isdn 
show LineO 
show memory 
show modules 
show netconns 
show netstat 


- see page 11-4 

- see page 11-6 

- see page 11-8 


show ospf areas 

show ospf links [router I network I summary I external] 
show ospf neighbor 


show routes 
show SO IW2 I pO 
show sap 
show sessions 

show table filter I host I location I modem I netmask I snmp I user 
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Description of General Commands 

These general commands are described below. 

Version 

This command displays the ComOS software version number, and the uptime since the 
last boot. 

version 


Usage 

Always include the version number when reporting problems to Livingston Customer 
Support. 

Example 

Command> version 

Livingston Enterprises PortMaster Version 3.3.2 
System uptime is 21 days 15 hours 34 minutes 


Reboot 

This command reboots using the currently saved configuration. 


reboot 


Usage 

A PortMaster must be rebooted for a changed IP or IPX address, Ethernet protocol, or 
ISDN switch type to take effect, or for an upgrade loaded earlier into Flash RAM to be 
used. 



Note - Rebooting performs a soft reboot that takes approximately 30 seconds. This 
process resets all active ports to their saved configurations, disconnecting all active 
sessions. Any changes made since a "save" command was last issued will be lost when 
you reboot, unless you first save them. 
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Done, Quit, or Exit 

These commands exit the Command Line Interface. 

done 

quit 

exit 

Usage 

When you use these commands, the connection from your PC or terminal to the 
PortMaster is terminated. Depending on the PC or terminal software, a message 
usually appears to let you know that the connection to the PortMaster is lost. 

Example 

Command> quit 
Goodbye... 


Help 

This command provides online help for the PortMaster commands, 
help CommandName 

CommandName One of the general commands listed in Table 3-1 on page 3-1. 


Usage 

If you type the "help" command without a command name, the online help shows a 
list of valid keywords, with descriptions. If you include a command name, a 
description or secondary keyword with description is shown. 

Example 

Command> help add 

Valid add commands are: 

filter - Add a new packet or access filter 

host - Add a host to the local hosts table 

route - Add a route to the static routing table 
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ipxroute - Add an IPX route to the static routing table 
location - Add a new Dialnet dial-out location 
snmphost - Add a host to the SNMP access list 
netuser - Add a SLIP or PPP user to the password table 
user - Add a login user to the password table 

Ifconfig 

This command displays configuration values for all interfaces and allows modification 
of active values. 

Note - This command should be entered on one line, without any breaks. The line 
breaks shown here are due to the limited space available. 



ifconfig [Interface] [address Ipaddress ] [netmask Ipmask ] 

[destination Ipaddress(dest)] [ipxnet Ipxnetwork] 

[ipxframe ethernet_802.21 ethernet_802.31 ethemet_802.2_ii I ethernet_ii] 
[up] [down] [private [-private] 


Interface 

Ipaddress 

Ipaddress(dest) 

Ipmask 

Ipxnetwork 

ipxframe 


The interface specification, for example, etherO, frml, frmwl. 
The IP address of the interface. 

The IP address of the the destination of a point-to-point 
connection. 

The netmask for the interface IP address. 

The IPX network number of the interface. 

The frame type used when sending IPX packets out of the 
Ethernet interface. Options include the four protocols that 
follow. 


ethemet_802.2 Use Ethernet 802.2 protocol. This is the default encapsulation 
used by Novell NetWare Version 4.0. 

ethemet_802.2_ii Use Ethernet 802.2_ii protocol. This encapsulation is not 
commonly used. 
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ethernet_802.3 

Use Ethernet 802.3 protocol. This is the default encapsulation 
used by Novell NetWare Version 3.11. 

ethernet_ii 

Use Ethernet II protocol. This is sometimes used for networks 
that handle both TCP/IP and IPX traffic. 

up 

The interface is brought up. 

down 

The interface is shut down. 

private 

No routing information will be transmitted on this interface. 

-private 

Routing information is broadcast by Routing Information 
Protocol (RIP). 

Usage 



The "ifconfig" command allows you to view and change the active configuration of all 
network interfaces. The examples show "ifconfig" used to view the Ethernet 
parameters, and then change them. For more information, refer to the Configuration 
Guide for PortMaster Products. 

While "ifconfig" can be used to modify the active Ethernet interface, it is better to use 
the "set" commands followed by "save all" and "reboot." 

Examples 

Command> ifconfig 

etherO: flags=16<IP_UP,IPX_DOWN,BROADCAST> 

inet 192.168.1.2 netmask ffffOOOO broadcast 192.168.0.0 mtu 1500 

Command> ifconfig etherO address 192.168.100.1 netmask 255.255.255.0 

etherO: flags=16<IP_UP,IPX_DOWN,BROADCAST> 

inet 192.168.100.1 netmask ffffffOO broadcast 192.168.100.0 mtu 1500 

See Also 

traceroute - page 3-9 
ping - page 3-8 
ifconfig - page 11-9 
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Dial 


This command initiates dialing to a network location. 


dial Locname [-x] 


Locname Location name to dial. 

-x Display send and expect strings during dialing. Also resets 

some debugging values previously set with "set debug." 

Usage 

This command is useful when you are testing a location configuration. Set the location 
to "manual/' set the console, and initiate a connection to a remote location using the 
dial command. You can watch the connection process to ensure that location-specific 
parameters are configured correctly. 

Example 

Command> set console 

Command> dial loci -x 

Starting dial to location loci using SI 

sendthem (atdt5551212\r) 

expect (CONNECT) 

atdt5551212\r\r\nCONNECTgot it 

sendthem (\r) 

expect (ogin:) 

38400\r\n\r\n\r\nserver login:got it 
sendthem (john\r) 
expect (ssword:) 
john\r\nPassword:got it 
sendthem (jogrtheyz\r) 
expect (PPP) 

\r\nPPPgot it 

Chat Succeeded - Starting PPP 
LCP IPCP Open 
Connection Succeeded 
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See Also 

reset dialer - page 3-19 
set console - page 3-15 
set debug - page 3-12 


Ping 

This command sends ten ICMP echo request packets to the target, and listens for an 
ICMP echo reply. 

ping [Ipaddress ] 


Ipaddress IP address or host name of host to ping. 


Usage 

Ping is the basic connectivity test for network debugging. Ping takes its source address 
from the etherO interface, as does TCP. 

To stop the process, type the "ping" command with no argument. 

Example 

Command> ping www.edu.com 
www.edu.com (172.16.200.3) is alive 

See Also 

ptrace - page 3-9 
traceroute - page 3-9 
set reported_ip - page 4-11 
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Traceroute 

This command traces a network route by sending packets with Time-To-Live set to 
between 1 and 30 and printing the addresses that send back ICMP Time Expired 
packets. 

traceroute [Ipaddress] 

Ipaddress IP address of destination to which route is to be traced. 


Usage 

Traceroute (UDP) takes its source address from the interface through which it exits. 
To stop the traceroute, issue the command with no argument. 

Example 

Command> traceroute 172.16.1.2 
traceroute to (172.16.1.2), 30 hops max 

1 192.168.96.2 

2 192.168.1.3 

3 172.16.1.2 

See Also 

ping - page 3-8 
ptrace - page 3-9 

Ptrace 

This command allows you to see packet information as it passes through the 
PortMaster. Filters are used to define which packets you want to display. 

ptrace [Filtername] 

Filtername Name of filter defining which packets to display. 
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Usage 

Packets permitted by the filter are displayed. "Ptrace" does not display ICMP or UDP 
packets originating on the PortMaster itself. 

To stop ptrace, issue the command with no argument. 

Caution - When debugging from a Telnet session be very careful not to "ptrace" Telnet 
packets going between the PortMaster and the host from which you are using Telnet. 
Doing so can create an endless loop of messages. 


Example 

Command> add filter x 
Command> set filter x 1 permit icmp 
Command> ptrace x 
Packet Tracing Enabled 

See Also 

set console - page 3-15 

add filter - page 14-5 

set filter - page 14-6 to page 14-16 

show table filter - page 14-4 

show filter - page 14-4 

Pmlogin 

This command is used for debugging purposes to establish a login session from the 
PortMaster, using the PortMaster login service to an "in.pmd" daemon running on a 
host. 

pmlogin Ipaddress 

Ipaddress IP address or host name. 


Usage 

The PortMaster login service can only be used with a host that has the PortMaster 
"in.pmd" daemon software installed. 
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Example 

Command> pmlogin ra 
ra login: 

See Also 

telnet - page 3-12 
rlogin - page 3-11 

Rlogin 

This command is used for debugging purposes to establish a login from the PortMaster 
to a host. 

rlogin Ipaddress 

lpaddress IP address or host name. 


Usage 

Rlogin is a method for logging into a remote machine from a workstation. Once the 
login and password procedures are complete, a session is started on the host. 

Example 

Command> rlogin ra 
ra login: 

See Also 

telnet - page 3-12 
pmlogin - page 3-10 
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Telnet 

This command is used for debugging purposes to establish a login from the PortMaster 
to a host using the Telnet protocol. 

telnet Ipaddress 

Ipaddress IP address or host name. 


Usage 

Telnet is an Internet standard protocol used for remote terminal service. 

Example 

Command> telnet ra 
ra login: 

See Also 

rlogin - page 3-11 
pmlogin - page 3-10 

Debug 

This command sets the use of debug, used for troubleshooting, 
set debug Hex 

set debug isdn I isdn-d I isdn-m I termination on I off 
set debug off 

Hex 0x0 disables the output for a Hex debug. This is the default. 

0x18 outputs information about routing table updates from 
RIP. 
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isdn 

0x51 allows observation of Point-to-Point Protocol (PPP), 

Local Management Interface (LMI), and Annex-D 
configuration requests and acknowledgments. 

0x54 allows observation of the last 60 characters sent and 
received on an asynchronous port, and the last 2 termination 
causes, when a show command in entered on the port. 

0x72 displays interactivity between the ComOS and the Flash 
or nonvolatile RAM when reading from or writing to the 
nonvolatile RAM. 

0x74 displays the last 60 characters of I/O. 

0x75 same as 0x51 and 0x54 with more detail. 

0x78 shows Telnet negotiation options when someone is 
connecting to the PortMaster by Telnet. 

0x81 shows updates being made to the Address Resolution 

Protocol (ARP) cache. 

Set "on" to show ISDN debugging information (such as 
connects, disconnects, and SPID registering) on the console. 

isdn-d 

Set "on" to show ISDN frame debugging information on the 
console. 

isdn-m 

Set "on" to show ISDN low-level debugging information on 
the console. 

termination 

Set "on" to display detailed port termination information. 

off 

Clears all debug settings except for Hex debugs (which need 
to be turned off with the "set debug 0x0" command) 
currently active in the PortMaster. 

Usage 



The "debug" command is useful for troubleshooting such PortMaster activities as the 
PPP negotiation process. Output is sent to the system console set by the "set console" 
command. Use of the "debug" command for troubleshooting OSPF protocol is 
described on page 11-24. 
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Example 

To debug PPP negotiations, enter the following commands: 

Command> set console 
Command> set debug 0x51 

To stop the debug output, enter the following: 

Command> set debug 0x0 
Command> reset console 

Refer to the Configuration Guide for PortMaster Products for information on interpreting 
the output. 

See Also 

ptrace - page 3-9 
traceroute - page 3-9 
set console - page 3-15 
set debug - page 11-24 

Erase 

This command can be used to erase all or part of the nonvolatile memory in the 
PortMaster. 

erase all-flash I comos I configuration 

erase file String 

erase partition Number 

all-flash Erases all the nonvolatile memory in the PortMaster, 

including the ComOS. 

comos Removes the PortMaster ComOS, after which you can no 

longer boot from Flash RAM. 

configuration Erases configuration data, so that after the next reboot the 
PortMaster will be configured to the factory defaults. 
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file 

String 

partition 

Number 


Erases a specified file from nonvolatile memory. 

The name of the file to be erased; see "show files" on page 
3-24 for file names. 

Use this keyword only when told to do so by Livingston 
Technical Support. 

A partition number from 0 to 7. 



Usage 

Caution - Be very careful when you use this command. Refer to the Configuration Guide 
for PortMaster Products for troubleshooting information. 


It may take up to a minute for the erasure to finish; wait until it is over before issuing 
any other commands. 

Example 

This example erases the configuration information stored in Flash RAM, restoring the 
PortMaster to factory defaults. 

Command> erase configuration 
Successfully erased FLASH configuration 


Console 

This command sets the port as the PortMaster system console. System messages sent to 
this port can be displayed on an attached device such as a terminal. 

set console [SO I pO] 

SO Any asynchronous port. 

pO Parallel port, to have console messages sent to an attached 

parallel printer. 
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Usage 

If no port is specified, the current connection becomes the console. The command 
"reset console" removes the console, and "save console" saves the console setting to 
nonvolatile memory. 

Example 

Command> set console sO 
Setting CONSOLE to port SO 

See Also 

save console - page 3-17 
reset console - page 3-19 
set debug - page 3-12 

TFTP 

This command retrieves a file of configuration commands from a host using the Trivial 
File Transfer Protocol (TFTP). 

tftp get Ipaddress String 

Ipaddress IP address or host name of the TFTP server. 

String The name of the file to be retrieved from the TFTP server. 

Usage 

See your system administration manual for instructions on how to set up a TFTP server 
on your host; "put" is not yet available. 

Example 

Command> tftp get 192.168.1.70 pm2.cfg 

Requesting tftp of pm2.cfg from host 192.168.1.70 (192.168.1.70) 

Output from configuration commands in file /tftpboot/pm2.cfg appears here. 
tftp complete 
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Save 

This command saves configuration information to the nonvolatile memory of the 
PortMaster. 

save EtherO I SO I W1 1 all I global I console I filter I host I location I netmask I pO I 
route I snmp I user I ospf 


EtherO 

An Ethernet interface 

see Chapter 5 

SO 

Any asynchronous port 

see Chapter 6 

W1 

Any synchronous port 

see Chapter 7 

all 

All configuration changes 


global 

Global configuration changes 

see Chapter 4 

console 

Console port setting 

see page 3-15 

filter 

Filter configuration changes 

see Chapter 14 

host 

Host Table settings 

see Chapter 15 

location 

Location Table settings 

see Chapter 13 

netmask 

Netmask Table settings 

see Chapter 4 

pO 

Parallel port settings 

see Chapter 8 

route 

Static Route Table settings 

see Chapter 15 

snmp 

SNMP Table settings 

see Chapter 4 

user 

User Table settings 

see Chapter 12 

ospf 

OSPF configuration 

see Chapter 11 
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Usage 

After making changes to configuration parameters or tables, you can save the changes 
individually using the “save” command with a specific keyword, or you can use the 
"save all" command to save all changes. Some configuration changes require that you 
reboot before the changes become effective, as noted. 

Example 

Command> save all 
Saving global configuration 
Saving ports 

User table successfully saved 
Hosts table successfully saved 
Static route table successfully saved 
Location table successfully saved 
SNMP table successfully saved 
Filter table successfully saved 
New configurations successfully saved. 

See Also 

show files - page 3-24 
set debug - page 3-12 
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Reset 

After making any changes to port configuration, you must reset PortMaster ports to 
make the changes take effect. 

reset SO I W1 1 all I console I dialer I pO I Handle I ospf 


SO 

Any asynchronous port. 

W1 

Any synchronous port. 

all 

Resets all ports. 

console 

Removes the current console setting, if any. 

dialer 

Checks all active interfaces against the location table and 
creates, destroys, or times out interfaces as needed. This 
command manually initiates a reset that is normally a 
background process. 

pO 

Handle 

The parallel port. 

"n" followed by a number (no space) from the first column of 
"show netconns," see page 3-34. 

ospf 

Removes the old MD5 authentication key numbers and 
secrets, and resets all active neighbors to use the new key 
numbers and secrets. 

Usage 



Resetting a port causes data terminal ready (DTR) to be held low for 500 milliseconds, 
then keeps it down for 10 seconds or until data carrier detect (DCD) drops, whichever 
occurs first. Ports are reset automatically when a connection drops. You can reset 
specific asynchronous or synchronous ports, or all the ports, by selecting the 
appropriate keyword. 

Example 

Command> reset sO 
Resetting port SO 


Description of General Commands 
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See Also 

save console - page 3-17 
set console - page 3-15 
show netconns - page 3-34 

Sysname 

This command sets the system name used for the SNMP sysname, IPX Service 
Advertising Protocol (SAP), Challenge Handshake Authentication Protocol (CHAP), 
and the command prompt. 

set sysname String 

String A name of up to 16 characters. No default. 


Usage 

The command prompt will display the system name instead of Command on 
PortMasters that have the system name set. 

Example 

Command> set sysname pm2 
System Name Successfully changed 
pm2> 

See Also 

set chap - page 4-13 
set snmp - page 4-28 


3-20 


Command Line Administrator's Guide—November 1996 








General Commands 


Examples of the Show Commands 

Examples and explanations of the show commands are given below. For show 
commands relating to the use of the OSPF routing protocol, see Chapter 11. 

Show All 

Shows a summary status of all ports. 


show all 

Example 

Command> show all 
Local Addr: goto.edu (192.168.96.6) 
Gateway: goto-90-gw.edu.com 
DNS Server: server.edu.com 


Port 

Speed 

Mdm 

Host 

Type 

SO 

9600 

on 

server 

Login 

SI 

115200 

on 

server 

Login/ 

S2 

115200 

off 

- 

Login/ 

S3 

115200 

off 

server 

Login/ 

S4 

115200 

on 

server 

Login/ 

S5 

57600 

on 

- 

Login/ 

S6 

9600 

off 

server 

Login/ 

PO 

_ 

• 

server 

Device 


Explanation 


Default Host: server.edu.com 
Netmask: 255.255.255.0 
Domain: edu.com 


Status 

Input 

Output 

Pend 

USERNAME 

0 

30 

0 

USERNAME 

218 

47343 

0 

USERNAME 

47343 

218 

0 

USERNAME 

17 

18 

0 

USERNAME 

0 

18 

0 

IDLE 

0 

0 

0 

USERNAME 

18 

18 

0 

IDLE 

0 

0 

0 


Port Port name. 

Speed Baud rate of port in bps. Default is 9600. 

Mdm Modem control setting. Default is "off". 

Examples of the Show Commands 
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Type 


Host 


Status 


Input 

Output 

Pend 


The login or device host for the port. 

Type of operation for which port is configured. 

Refer to the chapter on how portmasters work in the 
Configuration Guide for PortMaster Products. 

Input bytes to this port since last reboot. 

Output bytes from this port since last reboot. 

Pending output bytes on this port. 


Show ARP 


Shows ARP tables for the specified Ethernet or Frame Relay interface, 
show arp Interface 


The interface specification: For example, etherO, frml, or 
frmwl. 


Interface 


Example 

Command> show arp etherO 
10.0.0.3 at 00:00:c0:cb:a6:44 
10.0.0.10 at 00:00:c0:6f:19:5c 

Explanation 

For Ethernet interfaces, shows the mapping from IP address to MAC address in 
the ARP cache. 

For Frame Relay, shows the mapping from IP address to data link connection 
identifier (DLCI), and includes the Q.922 value for the DLCI. 
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Show EtherO 

Shows configuration values for Ethernet interface, 
show EtherO 
Command> show etherO 

Ethernet Status: IP - Enabled IPX - Enabled 

Interface Addr: pm2.edu.com (192.168.96.6) 

Netmask: 255.255.255.0 
Broadcast Address: 192.168.96.0 
IPX Network: FEEDFEFE 
IPX Frame Type: ETHERNET_802.3 
Ethernet Address: 00:c0:05:01:06:20 


Routing: 

Broadcast, Listen (On) 

Input Filter: 
Output Filter: 


Explanation 


Ethernet Status 

Shows IP and IPX protocols enabled for the Ethernet port. 

Interface Addr 

The IP address for the Ethernet interface. 

Netmask 

The netmask used on the network. 

Broadcast Address 

The IP address used as the local broadcast address. 

IPX Network 

The IPX network segment address. 

IPX Frame Type 

The IPX frame type that identifies the encapsulation method 
used on the IPX interfaces. 


Ethernet Address The Ethernet hardware MAC address. 

Routing Broadcast - the PortMaster broadcasts route information on 

the local Ethernet. 

Listen - the PortMaster listens for route information from 
other routers on the local Ethernet. 


Examples of the Show Commands 


3-23 









General Commands 


Input Filter 


The name of the input filter attached to the Ethernet 
interface. 


Output Filter 


The name of the output filter attached to the Ethernet 
interface. 


Show Files 

Displays file names and length, and how much of the 128-KB (PortMaster models other 
than PM-3), or 384-KB (PM-3) Flash configuration file system is in use. 

show files 

Example 

Command> show files 
File Name Length 


confdata 312 

config 12122 

passwd 328 


script 

snmp 

filters 

ipxfilt 

sapfilt 


location 


modem 


348 

143 

41 

416 

104 

104 

175 


Total 


14093 
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Explanation 

File 

Contents 

confdata 

Extensions to port configurations, etherl, RADIUS 

config 

Global configuration and standard port configurations 

passwd 

User Table 

hosttab 

Host Table 

routes 

Static Route Table 

location 

Location Table, except for chat scripts 

script 

Chat scripts for the Location Table 

snmp 

SNMP 

filters 

IP filters 

listnames 

ChoiceNet list IDs contained in filters 

ipxfilt 

IPX filters 

sapfilt 

SAP filters 

netmasks 

Static Netmask Table 

modem 

Modem Table 


Examples of the Show Commands 
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Show Global 

Shows system-wide configuration values, 

show global 

Example 

Command> show global 


System Name: 

- 


Default Host: 

server.edu.com 


Alternate Hosts: 

- 


IP Gateway: 

192.168.96.2 


Gateway Metric: 

1 


Default Routes: 

Quiet (Off) 


Name Service: 

DNS 


Name Server: 

server.edu.com 


Domain: 

edu.com 


Telnet Access Port: 

23 


Loghost: 

0.0.0.0 


Assigned Address: 

0.0.0.0 


RADIUS Server: 

server.edu.com 


Alternate Server: 

0.0.0.0 


Accounting Server: 

server.edu.com 


Alt. Acct. Server: 

0.0.0.0 


ChoiceNet Server: 

192.168.96.9 


Alt. ChNet Server: 

0.0.0.0 


Explanation 



File 

Contents 


System Name 

SNMP system name. 

- see page 3-20 

Default Host 

The host used for login services. 

- see page 4-5 

Alternate Hosts 

Alternate host. 

- see page 4-5 
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IP Gateway 

The default route gateway address. 

- see page 4-8 

Gateway Metric 

Metric for the default route. 

- see page 4-8 

Default Routes 

Default routing options for all interfaces. 

- see page 4-9 

Name Service 

The service—Network Information 

Service (NIS) or Domain Name Service 
(DNS)—used for resolving host names. 

- see page 4-6 

Name Server 

The name server IP address or host name. 

- see page 4-7 

Domain 

The domain name used with host name 
lookups. 

- see page 4-7 

Telnet Access Port 

The administrative Telnet port. 

- see page 4-4 

Loghost 

The host to which syslog messages are 
sent. 

- see page 4-5 

Assigned Address 

The base address in the assigned address 
pool. 

- see page 4-10 

RADIUS Server 

The IP address or host name of the server 
running the RADIUS authentication 
service. 

- see page 4-18 

Alternate Server 

The alternate RADIUS authentication 
server. 

- see page 4-19 

Accounting Server 

The RADIUS accounting server. 

- see page 4-20 

Alt. Acct. Server 

The alternate RADIUS accounting server. 

- see page 4-20 

ChoiceNet Server 

The ChoiceNet server. 

- see page 4-21 

Alt. ChNet Server 

The alternate ChoiceNet server. 

- see page 4-19 
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Show Ipxroutes 

Shows the IPX routing table, 
show ipxroutes 


Example 

Command> show ipxroutes 


Network 

Gateway 

Flag 

Met 

Ticks 

Interface 

00001701 

95C60100:0080AD06A39A 

ND 

2 

2 

etherO 

95C60100 

95C60100:00C005010923 

NL 

1 

1 

etherO 


Explanation 

Network 

Gateway 

Flag 


Met 

Ticks 

Interface 


Destination IPX network. 

Gateway IPX address. 

H - A host route 
N - A network or subnet route 
S - A static route 

L - A route to a directly attached network or host 
D - A dynamic route 

C - A route that has been recently changed and not yet broadcast 
O - An obsolete route, scheduled for deletion 

Metric - Hop count to the remote destination. 

The time it takes to send the packet to the destination network in 
50-ms increments. 

The interface to the IPX network. 
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Show ISDN 

Shows the status of the ISDN ports, 

show isdn 


Example 

Command> show isdn 


D 

Ports 

State 

Change 

Start 

Up 

Down 

Time Sess 

In 

Out 

Err 

0 

SO/SI 

Active 

12days 

2 

2 

0 

0 

7 

232435 

242617 

0 

1 

S2/S3 

Active 

23:59 

4 

4 

0 

0 

84 

234492 

243629 

2 

2 

S4/S5 

Active 

12days 

2 

2 

0 

0 

32 

225771 

236417 

0 

3 

S6/S7 

Active 

12days 

2 

2 

0 

0 

10 

215027 

224158 

0 

4 

S8/S9 

Active 

6days 

4 

4 

0 

0 

8 

233815 

242951 

0 

5 

S10/S11 

Active 

12days 

2 

2 

0 

0 

84 

227767 

237771 

0 

6 

S12/S13 

Active 

23:56 

4 

4 

0 

0 

1 

222791 

231927 

0 

7 

S14/S15 

Active 

12days 

2 

2 

0 

0 

1 

219985 

230626 

0 

8 

S16/S17 

Active 

12days 

2 

2 

0 

0 

0 

213797 

222935 

0 

9 

S18/S19 

Line Down 12days 

0 

0 

0 

0 

0 

0 

0 

0 


Explanation 


D 

D channel associated with active session. 

Ports 

ISDN port numbers on the PortMaster. 

State 

Line status. 

Change 

Time since last change in status. 

Start 

Number of times NT1 has attempted to bring up link. 

Up 

Number of times a link has gone to UP status. 

Down 

Number of times a link has gone to DOWN status. 

Time 

Number of times D channel has timed out attempting to 
bring up the link. 
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Sess Number of times PortMaster has received a connect message 

from the switch. 

In Number of input ISDN frames on B channel. 

Out Number of output ISDN frames on B channel. 

E rr Number of cyclic redundancy check (CRC), abnormal 

terminations, overrun, bad byte count (bbc), and lost frame 
errors. 

Show LineO 

Shows the status of a T1 or El PRI line on a PortMaster 3. 
show LineO 

LineO lineO or linel. 

T1 Example 

Command> show lineO 

-lineO - T1 Primary Rate ISDN- 

Status: UP Framing: ESF 

Receive Level: +2dB to -7.5dB 

Alarms 


Blue 0 

Yellow 0 

Receive Carrier Loss 0 

Loss of Sync 0 


Encoding: B8ZS PCM: u-law 
Violations 


Bipolar 102 

CRC Errors 1 

Multiframe Sync 9 


3-30 


Command Line Administrator's Guide—November 1996 
















General Commands 


El Example 

Command> show lineO 

-lineO - El Primary Rate ISDN 


Status: UP 

FI Framing: CRC4 Encoding: HDB3 PCM: a-law 

Alarms 

Violations 


Remote Alarm o Bipolar 201 

Receive Carrier Loss 0 CRC4 o 

Loss of Sync o E-bit o 

FAS bit 0 


Explanation 


Status 

Status of T1 or El PRI line. 

F State - El only 
(FI in example) 

PRI layer 1 state at user side of interface. 

Range: F0 to F6. 

F0 = Power off, no signal. 

FI = Operational. 

F2 to F5 = Failure conditions FC1 to FC4. 

F6 = Power on, no signal. 

Framing 

Framing format in use. - see page 10-6 

Encoding 

Encoding method in use. - see page 10-7 

PCM 

Pulse Code Modulation method in use. - see page 10-7 

Receive Level 

Signal strength on the line. 

T1 Alarms 

Blue - Unframed all ones signal. 

Yellow - D4 bit2, D4 12th F-bit, or extended superframe (ESF) 
mode (framing) signal. 

Receive Carrier Loss - Loss of carrier signal. 

Loss of Sync - Device loss of synchronization signal. 

El Alarms 

Remote Alarm - Remote is in alarm state. 

Receive Carrier Loss - Loss of carrier signal. 

Loss of Sync - Device loss of synchronization signal. 


Examples of the Show Commands 
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T1 Violations Bipolar - Consecutive bipolar violations of same polarity. 

CRC Errors - Errors in CRC6 code words (ESF framing), or in 
the Ft framing bit position (D4 framing). 

Multiframe Sync - Multiframes received out of 
synchronization. 

El Violations Bipolar - Consecutive bipolar violations of same polarity. 

CRC4 - Errors in the CRC4 code words (CRC4 framing). 

E-bit - CRC4 error bits. 

FAS bit - Errors in the frame alignment signal (FAS) code 
words (FAS framing). 


Show Memory 

Shows system memory use. 


show memory 


Example 

Command> show memory 

System memory 1048576 bytes - 860552 used, 188024 available 
64:1 96:1 1152:1 128:1 640:2 144:3 80:1 16:10 160:0 208:1 32:11 
System nbufs 1400 -137 used, 1263 available 


Explanation 


System Memory (values from example) 


First value (1048576 bytes) Total memory installed in the system. 

Second value (860552 bytes) Highest amount of system memory ever used by 

system. 


Third value (188024 bytes) Memory remaining in the free large heap. If this value 

is greater than zero, the system has never run out of 
memory. 
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64:1 96:1 1152:1, and so on. Memory fragments, Size:Number. 

Size - size in bytes (example 64). 

Number - number of fragments of that size (example 1). 

To determine the total free memory, add the free large 
heap to the sum of the fragments. 

When memory is used, memory fragments are used 
before the free large heap. 

System nbufs Network buffers showing total buffers, buffers in use 

by network packets, and available buffers. Each buffer 
is 128 bytes. 

System bbufs Equivalent to system nbufs, but buffer size is increased 

to 1600 bytes. Seen on PortMaster Internetwork 
Routers. 

Show Modules 

The PortMaster ComOS is divided into functional modules. This command shows the 
names and sizes of the modules that are loaded into the currently running ComOS. 
Optional functions, such as the SNMP Table, that are not loaded are not displayed. 


show modules 


Example 

Command> show modules 


Module 

State 

Start 

Len 

0 SNMP 

HEAP 

i 

i 

! 

! oo 

i a: 

■ 00 

23516 

1 IPX 

HEAP 

51bc 

15756 

2INIT 

HEAP 

0 

20924 

3 SYNC 

HEAP 

3dldc 

14952 

4 ISDN 

HEAP 

f028 

139076 

5ISDN-NORTH-AM HEAP 

30f6c 

14380 

6 ISDN-EUROPE 

HEAP 

34798 

29964 

7 ISDN-JAPAN 

HEAP 

3bca4 

5432 


Examples of the Show Commands 
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Explanation 

Module 

State 


Start 

Len 


The function module. 

Module state: 

HEAP The module is disabled. 
ACT The module is active. 

Memory location of start of the module. 
The length (size) of the module in bytes. 


Show Netconns 

Shows the TCP and UDP network sockets open on the PortMaster. 

show netconns 

Example 

Command> show netconns 


Hnd 

Recv-Q 

Send-Q 

Local Address 

Foreign Address 

(state) 

706 

0 

0 

goto.edu.com.1011 

server.edu.com.513 

CONNECTING 

615 

0 

0 

goto.edu.com.23 

0.0.0.0.0 

LISTEN 

588 

0 

2 

goto.edu.com.23 

xterml.edu.com.1389 

ESTABLISHED 

552 

0 

0 

goto.edu.com.1643 

0.0.0.0.0 

LISTEN 

120 

0 

0 

goto.edu.com.1011 

server.edu.com.1642 

ESTABLISHED 

76 

0 

0 

goto.edu.com.1030 

server.edu.com.53 

UDP 

10 

0 

0 

goto.edu.com.67 

0.0.0.0.0 

UDP 


Explanation 


Hnd 

Network handle. 

Recv-Q 

Number of packets in receive queue. 

Send-Q 

Number of packets in send queue. 
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Local Address Local host name or IP address with TCP or UDP port number. 
Foreign Address Foreign host name or IP address with TCP or UDP port number, 
(state) TCP connection state, or "UDP" for UDP sockets. 

See Also 

reset Handle - page 3-19 

Show Netstat 

Shows network interface statistics, 
show netstat 

Example 

Command> show netstat 

Name Ipkts Ierrs Opkts Oerrs Collis Resets Queue 

etherO 207757 0 215161 0 223 0 0 

Explanation 

Name Interface name. 

Ipkts Number of packets received since reboot. 

Ierrs Number of input errors since reboot. 

Opkts Number of packets sent since reboot. 

Oerrs Number of output errors since reboot. 

Collis Number of output collisions since reboot. 

Resets Number of resets on the interface since reboot. 

Queue Number of packets waiting to be sent from the interface. 


Examples of the Show Commands 
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Show Routes 

Shows the IP routing table. See the information on routing concepts in the Configuration 
Guide for PortMaster Products. 

show routes 


Example 

Command> show routes 


Destination 

Gateway 

Flag 

Met 

Interface 

0.0.0.0 

192.168.96.2 

NS 

1 

etherO 

192.168.96.0 

192.168.96.6 

NL 

1 

etherO 

192.168.1.0 

192.168.96.2 

ND 

2 

etherO 

192.168.2.0 

192.168.96.2 

ND 

3 

etherO 

192.168.3.0 

192.168.96.2 

ND 

3 

etherO 

192.168.23.0 

192.168.96.2 

ND 

3 

etherO 

192.168.24.0 

192.168.96.2 

ND 

3 

etherO 

192.168.100.0 

192.168.67.33 

NS 

2 

Unknown 


Explanation 

Destination IP address of the host or network to which packets will be sent. 


Gateway 


Flag 


The IP address of the directly connected host through which 
packets will be forwarded to the destination. 

H - A host route 

N - A network route 

S - A statically learned route, either configured and permanent 
or temporary via a RADIUS Framed-Route 
L - A route attached to a local interface 
D - A dynamically learned route, via RIP or OSPF 
C - A changed route that has yet to be advertised to all 
interfaces 

O - An obsolete route scheduled for deletion 
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Met Metric - Hop count to the remote destination. 

Interface The interface used for forwarding packets to the gateway 

for the destination. 


Show SO 


Shows the current status and configuration for the port. This command can be used for 
asynchronous, synchronous, ISDN, and parallel ports on the PortMaster. 

show S0\W1\ pO 


Example 

Command> show sO 

-Current Status - Port SO 

Status: USERNAME 


Input: 
Output: 
Pending: 
Modem Status: 


62 

652 

0 

DCD+ CTS+ 


Parity Errors: 0 
Framing Errors: 22 
Overrun Errors: 0 


Active Configuration Default Configuration^ = Host Can Override) 


Port Type: 

Login 

Login (Security) 

Login Service: 

PortMaster 

PortMaster 

Baud Rates: 

115200 

115200,115200,115200 

Databits: 

8 

8 

Stopbits: 

1 

1 

Parity: 

none 

none 

Flow Control: 

None 

None 

Modem Control: 

off 

off 

Hosts: 

tm 

default 

Terminal Type: 
Login Prompt: 

$hostname login: 

Idle Timeout: 

40 
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Explanation 

Status 

Input/Output/ 

Pending 

Errors 

Modem Status 


Active Configuration 
Default Configuration 

Port Type 

Login Service 

Baud Rates 
Databits 
Stopbits 
Parity 

Flow Control 

Modem Control 
Hosts 

Terminal Type 
Login Prompt 
Idle Timeout 


Refer to the information on port status in the Configuration 
Guide for PortMaster Products. 

Number of bytes input, output, or pending since last 
reboot. 

Number of Parity, Framing, or Overrun errors since last 
reboot. 

The plus signs on DCD and CTS indicate that the DCD and 
CTS signals on the port are asserted (high). 

For modem status information for ISDN lines, refer to the 
ISDN connection chapter in the Configuration Guide for 
PortMaster Products. 

The configuration currently active on the port. 

The configured port parameters, including available 
alternatives. 

The port type - login, device, or network. (Security) 
indicates that security has been set for the port. 

See page 6-21. 

Type of login service selected - PortMaster, rlogin, telnet, or 
netdata. 

The port speed in bits per second (bps). 

The number of databits per byte. 

The number of stopbits per byte. 

The parity checking used. 

Flow control used - Software (Xon/Xoff), hardware 
(RTS/CTS), or none. 

Modem carrier detect signal setting. 

Active configuration shows the current host accessed. 

The terminal type selected. 

The user login prompt. 

The idle time in minutes before a port is reset. 
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Show SAP 


Shows the active Service Advertising Protocol (SAP) table. 


show sap 


Example 


Command> show sap 


Server 

Svc 

Network 

Host Sock 

Hops 

Interface 

080009 A8CEAA80CGNPIA8CEA 

30C 

COA86000: 

080009A8CEAA: 400C 

2 

etherO 

NOVELL 

4 

00001701: 

000000000001: 0451 

2 

etherO 


Explanation 


Server 

The 

Svc 

The 

Network 

The 

Host 

The 

Sock 

The 

Hops 

The 

Interface 

The 


IPX server 

IPX service available on the server 
IPX network number of the destination 
IPX address of the destination 
IPX socket number of the destination 
hop count to the remote destination 
interface used for sending packets 


Examples of the Show Commands 
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Show Sessions 

Shows current use of ports, 

show sessions 


Example 

Command> show sessions 

Port User Host/Inet/Dest Type 

Dir 

Status 

Start 

Idle 

SO 

tm 

Login 

In 

USERNAME 

0 

0 

SI 

tm 

Device 

Out 

ESTABLISHED 

1:23 

1:23 

S2 

tm 

Device 

Out 

ESTABLISHED 

3 

3 

S3 

- 

Log/Net 

In 

USERNAME 

0 

0 

S4 

tm 

Login 

In 

USERNAME 

0 

0 

S5 

tm 

Log/Net 

In 

IDLE 

0 

0 

S6 

tm 

Login 

In 

USERNAME 

0 

0 

S 7 

tm 

Login 

In 

USERNAME 

0 

0 

S8 

tm 

Login 

In 

USERNAME 

0 

0 

S9 

tm 

Login 

In 

USERNAME 

0 

0 

S10 

- 

Netwrk 

Out 

IDLE 

0 

0 

Explanation 






Port 


Port number. 





User 


Username of the user logged 

in on the port. 



Host/Inet/Dest 

Host for login users or host devices, or address of network 



users. 





Type 


Type of operation for which port is configured, or the active 



type for established ports. 




Dir 


Direction that the connection was established, inbound or 



outbound. 





Status 


Refer to the chapter on 

how portmasters work in the 




Configuration Guide for PortMaster Products. 



Start 


Time in minutes since the session started. 



Idle 


Time in minutes that the session has been idle. 
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Show Table 

Displays the contents of tables stored in the memory of the PortMaster. Each command 
is covered in more detail in the chapter for that table. 

show table filter I host I location I modem I netmask I snmp I user 


show table filter 

See below and 

show table host 

See page 15-10 

show table location 

See page 13-4 

show table modem 

See page 6-40 

show table netmask 

See page 4-23 

show table snmp 

See page 4-27 

show table user 

See page 12-4 


Example 

To see a list of filters in the Filter Table: 

Command> show table filter 

next.in sapo.out ether.in inter.in general.in 

general.out hosts.in 

To see the contents of a specific filter: 

Command> show filter inter.in 

1 deny 192.168.200.0/24 0.0.0.0/0 ip 

2 permit 0.0.0.0/0 0.0.0.0/0 tcp estab 

3 permit 0.0.0.0/0 0.0.0.0/0 udp dst eq 53 

4 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 53 

5 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 25 


Examples of the Show Commands 
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4 


This chapter describes how to use the Command Line Interface for global 
configuration. Detailed command definitions follow a command summary table. 
Detailed command definitions and summary tables are also provided for RADIUS, 
ChoiceNet, Netmask, and SNMP configuration commands. 

The Command Line Interface can be used to configure global settings, allowing you to 
set default and alternate hosts, set gateways and metrics, set the name service used by 
the PortMaster, and set the administrative password of the PortMaster. 

Displaying Global Settings 

To display information about your configuration, use the following global commands: 

• show all - see page 3-21 

• show global - see page 3-26 

For general information about using the Command Line Interface, refer to Chapter 2, 
"Introduction." 

Configuring Global Settings 

To configure global settings: 

1. At the command line, enter your global settings, as in the following examples: 

Command> set domain edu.com 
Command> set telnet 23 
Command> set host 172.16.200.1 


Displaying Global Settings 
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As you press [Enter] following each command, the PortMaster responds by 
echoing the configuration change you have made. For example: 


Command> set telnet 23 

Setting Telnet Administration port to 23 


For a description of each command, refer to "Description of Global Commands" on 
page 4-3. 

2. When you finish configuring the global settings, enter the "save global" command 
to write your configuration changes to the nonvolatile memory of the PortMaster, 
as follows: 


Command> save global 


"save all" can also be used. 

Summary of Global Commands 


Table 4-1 contains the global configuration commands that affect the entire PortMaster. 
Table 4-1 Global Configuration 


Command Syntax 

show all 

- see page 3-21 

show global 

- see page 3-26 

set password Password 


set telnet Tport 


set host [1121314] Ipaddress 


set loghost Ipaddress 


set namesvc dns 1 nis 


set nameserver [2] Ipaddress 


set domain String 


set gateway Ipaddress [Metric] 
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Table 4-1 Global Configuration (Continued) 

Command Syntax 

set default on I off I broadcast I listen 

set assigned_address Ipaddress 

set reported_ip Ipaddress 

set netbios on I off 

set pap on I off 

set chap on I off 

set ipx on I off 

set maximum pmconsole Number 

set serial-admin on I off 

set isdn-switch ni-11 dms-10015ess 15ess-ptp 

set isdn-switch net31 vn21 vn31 vn41 ltr61 ntt I kdd 

Description of Global Commands 

These commands are used to configure everything on the PortMaster except for 
interfaces and tables. 

Password 

This command sets the PortMaster administrative password, 
set password [ Password] 

Password String of up to 16 characters. Default is no password. 


Usage 

When shipped, the PortMaster has no password. You must enter a password to protect 
the PortMaster administrative features. Using the command "set password" followed 
by [Enter], erases the administrative password. 


Description of Global Commands 
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Example 

Command> set password supercalifragil 
!root password changed from to supercalifragil 


Telnet 

This command sets the Telnet administrative port, 
set telnet Tport 

Tport Telnet administrative port. Default is 23. 

Usage 

This command allows the administrator to use the Telnet protocol to maintain the 
PortMaster. The value is a number from 0 to 65535. If set to 0, the PortMaster disables 
the Telnet administration function. Ports numbered 10000 through 10100 are reserved 
and should not be used for this function. 

Example 

Command> set telnet 23 

Setting Telnet Administration port to 23 

See Also 

set maximum pmconsole - page 4-14 
set serial-admin - page 4-15 
telnet - page 3-12 
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Host 


This command sets the default IP address or host name for login sessions, 
set host [1121314] Ipaddress 

1121314 Can be used to specify alternate hosts, with the primary host 

being 1, the secondary host 2, and so on up to 4. If omitted, 
the default is 1. 

Ipaddress IP address or host name. 

Usage 

If you do not want the PortMaster to provide login or host device service, this 
parameter should not be set. Setting to 0.0.0.0 removes the entry. 

Example 

Command> set host 172.16.200.1 
Default host changed from to 172.16.200.1 

See Also 

set SO host - page 6-29 

set SO servicejogin - page 6-27 

set SO service_device - page 6-28 

set user host - page 12-9 

set user service - page 12-10 

Loghost 

This command sets the IP address or name of the host to which the PortMaster sends 
syslog messages. 

set loghost Ipaddress 

Ipaddress Loghost IP address or host name 


Description of Global Commands 
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Usage 

Syslog messages are sent as syslog facility "auth" and priority "info" (auth.info). Do 
not use a loghost at the far end of an on-demand location, as doing so might keep the 
connection up. 

Setting the IP address to 0.0.0.0 disables the syslog at the PortMaster. This change 
requires a reboot to become effective. 

Example 

Command> set loghost 192.168.200.2 
Loghost changed from 0.0.0.0 to 192.168.200.2 

Nameservice 

This command sets the service (NIS or DNS) used for resolving host names, 
set namesvc dns I nis 

Use Domain Name Service (DNS) for host name lookups. 

Use Network Information Service (NIS) for host name 
lookups. 

Usage 

A name service should be selected only if users will be prompted for hosts that require 
a name service for resolution to an IP address, or to display host names instead of 
addresses in the administrative Command Line Interface. 

Example 

Command> set namesvc dns 
Name Service changed from NIS to DNS 

See Also 

set nameserver - page 4-7 
set domain - page 4-7 


dns 

nis 
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Nameserver 

This command sets the name server IP address or host name. 


set nameserver [2] Ipaddress 

2 Set an alternate name server. 

Ipaddress IP address or host name. 


Usage 

Sets the server used for DNS or NIS host name lookups. 

Example 

Command> set nameserver 172.16.200.2 
Name Server changed from 0.0.0.0 to 172.16.200.2 

See Also 

set domain - page 4-7 
set namesvc - page 4-6 

Domain 

This command sets the domain name to use with host name lookups, 
set domain String 

String Domain name 


Usage 

Enter the domain name of your network in this parameter, after you have selected NIS 
or DNS as your name service, and have set a name server address. 


Description of Global Commands 
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Example 

Command> set domain edu.edu 
Domain changed from to edu.edu 

See Also 

set namesvc - page 4-6 
set nameserver - page 4-7 

Gateway 

This command sets the default route gateway address, 
set gateway Ipaddress [Metric] 

Ipaddress IP address. 

Metric Metric for the default route, between 1 and 15. Default is 1. 

Usage 

The route gateway is the address of a router of last resort to which packets are sent 
when the PortMaster has no routing information for a packet. The gateway can never 
be the address of a PortMaster interface. 

Example 

Command> set gateway 172.16.200.1 1 

Gateway changed from 0.0.0.0 to 172.16.200.1, metric = 1 

See Also 

show routes - page 3-36 
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Default Routing 


This command sets default routing (RIP) options for all interfaces, 
set default on I off I broadcast I listen 


on 


The PortMaster sends and listens for default route 
information. 


off 


The PortMaster neither sends nor listens for default route 
information. This is the default. 


broadcast 


The PortMaster sends default route information, if it has a 
default route. 


listen 


The PortMaster listens for default route information. 


Usage 

When default routing is turned on, the PortMaster listens for default route information 
in RIP messages, and advertises a default route to RIP if the PortMaster has one. 

Example 

Command> set default on 

Default routing changed from off (no_broadcast,no_listen) to on (broadcast,listen) 

See Also 

show global - page 3-26 


Description of Global Commands 
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Assigned Base Address 

This command sets the base IP address of the assigned address pool, 
set assigned_address Ipaddress 

Ipaddress Base IP address assigned 


Usage 

The PortMaster allocates a pool of addresses starting at the assigned base address and 
counting up. The total number of addresses is equal to the number of ports configured 
for network dial-in. If someone dials in and requests an unused address from the pool, 
that is assigned. If someone dials in and requests any address, the next address from 
the pool is assigned. If someone disconnects, their address is placed at the end of the 
pool for reuse. 

Example 

Command> set assigned 172.16.200.220 

First Assigned address changed from 0.0.0.0 to 172.16.200.220 

See Also 

set user destination - page 12-12 
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Reported IP 

This command is used to report an IP address different from the EtherO address during 
PPP negotiation and Serial Line Internet Protocol (SLIP) startup. 

set reported_ip Ipaddress 
Ipaddress IP address 


Usage 

Any IP address may be used with this command. This feature is valuable for sites that 
require a number of PortMaster devices to appear as a single IP address to the outside 
world. With PPP, this information is placed in the startup message, and the PortMaster 
devices report this address to the outside. With SLIP, this information is placed in the 
startup message. 

Example 

Command> set reportedjp 172.16.200.1 

Reported IP address changed from 0.0.0.0 to 172.16.200.1 

See Also 

set EtherO address - page 5-3 

set user local-ip-address - page 12-13 

NetBIOS 

This command is used to set the NetBIOS parameter for use with IPX. 
set netbios on I off 


When the NetBIOS parameter is on, the PortMaster 
broadcasts type 20 packets. 

When the NetBIOS parameter is off, the type 20 packets are 
not broadcast across the router. The default is off. 


Description of Global Commands 
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Usage 

Full NetBIOS protocol compliance requires that this command be set to "on," and the 
PortMaster will then propagate and forward type 20 broadcast packets across your IPX 
network. System administrators should be aware of this before changing from the 
default of "netbios off." 

Example 

Command> set netbios on 
NetBIOS changed from off to on 

See Also 

set ipx - page 4-13 

PAP 

This command provides the choice of accepting either Password Authentication 
Protocol (PAP) or CHAP authentication for dial-in users, or CHAP only. 

set pap on I off 

on If PPP is detected on a port, ask user to authenticate with 

PAP. If that is refused, ask to authenticate with CHAP. 

Default is on. 

off Do not request or accept PAP authentication. 


Usage 

With PAP set to "off," the default is to support CHAP. If you do not want to support 
CHAP authentication, you must disable CHAP (see page 4-13). 

Example 

Command> set pap off 

PAP authentication changed from on to off 
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CHAP 


This command provides the choice of supporting or disabling CHAP authentication for 
dial-in users. 

set chap on I off 


CHAP authentication is supported. This is the default. 
CHAP authentication is disabled. 


on 


off 


Usage 

If you do not want to support CHAP authentication, you must set CHAP to "off." With 
both PAP and CHAP off, the only authentication method allowed is a 
usemame/password login. 

Example 

Command> set chap off 

CHAP authentication changed from on to off 

See Also 

set pap - page 4-12 
show global - page 3-26 


IPX 


This command allows you to enable or disable PortMaster support for the Novell 
Internet Packet Exchange (IPX) protocol. 


set ipx on I off 


off 


on 


Enables support for the IPX protocol. 

Disables support for the IPX protocol. This is the default. 


Description of Global Commands 
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Usage 

To enable support for IPX, you must use this command. After changing the IPX setting, 
you must use the "save all" command and reboot the PortMaster before the change 
takes effect. 

Example 

Command> set ipx on 

IPX will be enabled after next reboot 

See Also 

set EtherO ipxframe - page 5-7 
set EtherO ipxnet - page 5-6 
set SO ipxnet - page 6-37 
set W1 ipxnet - page 7-8 
set location ipxnet - page 13-10 
show modules - page 3-33 

Maximum PMconsole 

This command sets the maximum number of concurrent PMconsole GUI connections 
into the PortMaster. 

set maximum pmconsole Number 


Number The maximum number of concurrent connections to allow. 

Default is 1, maximum is 10. 



Usage 

The programs pmconsole, pminstall, pmreadconf, pmreadpass, pmcommand, and 
pmreset connect to TCP port 1643 on the PortMaster. If set to 2 or higher, more than 
one program can connect at the same time. 

Note - If two or more PMconsole GUIs are used to configure the PortMaster at the 
same time, each might not see the change made by the others. 
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Example 

Command> set maximum pmconsole 2 

See Also 

set serial-admin - page 4-15 
set telnet - page 4-4 


Serial Admin 

This command enables or disables administrative logins using the serial ports of the 
PortMaster. 

set serial-admin on I off 


Enables administrative logins on serial ports. This is the 
default. 

Disables administrative logins on serial ports. 


Usage 

If administrative logins (Iroot) are disabled, you can still use port SO (or CO) for Iroot 
login by setting the console DIP switch to the up position. 

Example 

Command> set serial-admin off 

Serial Administration changed from on to off 


Description of Global Commands 
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ISDN Switch 

This command sets the switch provisioning for ISDN BRI connections to the 
PortMaster ISDN ports. For ISDN PRI switch settings, see page 10-5. 

set isdn-switch ni-11 dms-10015ess 15ess-ptp 

set isdn-switch net31 vn21 vn31 vn41 ltr61 ntt I kdd 


ni-1 

National ISDN-1 (NI-1) compliant. This is the default. 

dms-100 

Northern Telecom DMS-100 Custom. 

5ess 

AT&T 5ESS Custom Multi-Point. 

5ess-ptp 

AT&T 5ESS Custom Point-to-Point. 

net3 

European ISDN standard (includes Swiss extensions). 

vn2 

France - Older switch. 

vn3 

France - Older switch. 

vn4 

France - Current National switch. 

ltr6 

Germany - Older switch. 

ntt 

Japan. 

kdd 

Japan. 

Usage 



DMS-100 and 5ESS switches may have either switch-specific software or NI-1 software. 
When they have NI-1 software, you should use the NI-1 setting. 

The switch provisioning information is obtained from your ISDN telephone service 
provider. 

Note - Any change you make in the switch provisioning setting does not take effect 
until the PortMaster is rebooted. 
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Examples 

For an AT&T 5ESS Custom Multi-Point switch with switch-specific software: 

Command> set isdn-switch 5ess 
ISDN switch type set to ATT-5ESS 
Command> save all 
Command> reboot 

For an AT&T 5ESS Custom Multi-Point switch with NI-1 software: 

Command> set isdn-switch ni-1 
ISDN switch type set to NI-1 
Command> save all 
Command> reboot 

See Also 

set S10 spid - page 9-6 
set S10 directory - page 9-7 


Description of Global Commands 
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RADIUS Client Configuration 

The RADIUS commands in Table 4-2 configure the PortMaster to use a RADIUS server. 
RADIUS is consulted if a port is set for "security on" and a user is not found in the 
PortMaster User Table. 

Table 4-2 RADIUS Client Configuration 

Command Syntax______ 

set authentication_server Ipaddress 
set altemate_auth_server Ipaddress 
set secret String 

set accountin g [2] Ipaddress _______ 

The following commands configure the PortMaster as a RADIUS client. For RADIUS 
server configuration information, see the RADIUS Administrator's Guide. 

Authentication Server 

This command sets the primary RADIUS authentication server. 


set authentication_server Ipaddress 

Ipaddress IP address or host name for a host running a RADIUS 

authentication server on UDP port 1645. 


Usage 

For more information about setting up a RADIUS authentication server, refer to the 
RADIUS Administrator's Guide. 

Example 

Command> set authentication_server 192.168.200.1 
Authentication Server changed from 0.0.0.0 to 192.168.200.1 
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See Also 

set secret - page 4-19 
set accounting - page 4-20 
set altemate_auth_server - page 4-19 
set SO security - page 6-21 

Alternate Authentication Server 

This command sets the alternate RADIUS authentication server, which is used if the 
primary server does not respond. 

set altemate_auth_server Ipaddress 

Ipaddress RADIUS alternate authentication server IP address or host 

name. 


Usage 

This address must be different from that of the primary RADIUS authentication server. 

Example 

Command> set alternate 192.168.200.4 

Alternate Authentication Server changed from 0.0.0.0 to 192.168.200.4 

See Also 

set authentication_server - page 4-18 


Secret 

This command sets the RADIUS shared secret, 
set secret String 

strin 8 Shared secret, which has a maximum of 64 (ASCII printable 

only) characters. 


RADIUS Client Configuration 
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Usage 

This value is used to encrypt the user's password in a RADIUS Access-Request, and 
must match the secret used by the RADIUS server. 

Example 

Command> set secret expli7%QZixZZy7 
Authentication Secret successfully changed 

See Also 

set authentication_server - page 4-18 
set SO security - page 6-21 

Accounting 

This command sets the RADIUS accounting server, 

set accounting [2] Ipaddress 

2 If present, sets the alternate accounting server instead of the 

primary. 

Ipaddress IP address of a host running a RADIUS accounting server on 

UDP port 1646. 

% 

Usage 

The accounting server daemon must be present on the host before the RADIUS 
accounting server will function correctly. 

Example 

Command> set accounting 172.16.200.3 
Accounting Server changed from 0.0.0.0 to 172.16.200.3 

See Also 

set authentication_server - page 4-18 
set secret - page 4-19 
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ChoiceNet Client Configuration 


The ChoiceNet commands in Table 4-3 configure the PortMaster to use a ChoiceNet 
server. 

Table 4-3 ChoiceNet Client Configuration 

Command Syntax 

set choicenet [2] Ipaddress 

set choicenet-secret String 

The following commands configure the PortMaster as a ChoiceNet client. 


ChoiceNet 

This command sets the IP address of the ChoiceNet server, 

set choicenet [2] Ipaddress 

2 If present, sets the alternate ChoiceNet server instead of the 

primary. 

Ipaddress IP address or host name of the host running a ChoiceNet 

server on UDP port 1647. 

Usage 

Additional documentation for ChoiceNet will be available shortly. Please contact 
Livingston for availability. 

Example 

Command> set choicenet 192.168.200.6 

ChoiceNet Server changed from 0.0.0.0 to 192.168.200.6 

See Also 

set choicenet-secret - page 4-22 


ChoiceNet Client Configuration 
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Secret 

This command sets the ChoiceNet secret, 
set choicenet-secret String 

String Shared secret. Maximum length is 64 characters (ASCII 

printable only). 

Usage 

The shared secret is used to authenticate communications between the PortMaster and 
the ChoiceNet server. 

Example 

Command> set choicenet-secret vizkaRg76poj 
ChoiceNet Secret successfully changed 

See Also 

set choicenet - page 4-21 
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Netmask Table Configuration 

The Netmask Table commands in Table 4-4 configure the Netmask Table used for 
routing noncontiguous subnets. Use caution if configuring static netmasks. Read the 
information on setting static routes, in the Configuration Guide for PortMaster Products. 

Table 4-4 Netmask Table Configuration 

Command Syntax 
show table netmask 

save netmask 

add netmask Ipaddress Ipmask 
delete netmask Ipaddress 


Show Table Netmask 

This command shows the status of active and static special netmasks. 
show table netmask 


Usage 

The Netmask Table also supports special netmasks, which override the consolidation 
of hosts into subnets and subnets into networks in RIP broadcasts. 


Netmask Table Configuration 
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Example 


Command> show table netmask 
Active Netmasks: 


Network 


Netmask 


Type 


172.17.0.0 

172.16.0.0 


255.255.255.0 

255.255.255.0 


Static 

Dynamic 


Stored Netmasks: 
Network 


Netmask 


172.17.0.0 


255.255.255.0 


See Also 

save netmask - page 4-24 
add netmask - page 4-25 
delete netmask - page 4-26 
show routes - page 15-3 

Save Netmask 

This command is used to save netmask configurations, 

save netmask 

Usage 

After changing the netmask configuration, this command saves the new netmask 
configuration, "save all" can also be used. 

Example 

Command> save netmask 

New configurations successfully saved. 
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See Also 

show table netmask - page 4-23 
add netmask - page 4-25 
delete netmask - page 4-26 

Add Netmask 

This command is used to add a static netmask to the Netmask Table. Use caution with 
the static Netmask Table. Refer to the Configuration Guide for Port Master Products for 
more information. 

add netmask Ipaddress Ipmask 

Ipaddress The IP address of the network. 

Ipmask The netmask IP used for the network. 


Usage 

You can only have one netmask per network. The example shows the propagation of 
host routes for all dial-in clients with 192.168.8 addresses, instead of sending out a 
single network route for 192.168.8.0. 

A Caution - Be sure to add the netmask before setting any static routes that will be 
affected. 


Example 

Command> add netmask 192.168.8.0 255.255.255.255 
New netmask successfully added 

See Also 

show table netmask - page 4-23 
delete netmask - page 4-26 
save netmask - page 4-24 


Netmask Table Configuration 
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Delete Netmask 

This command is used to delete a static netmask from the Netmask Table, 
delete netmask Ipaddress 


Ipaddress The IP address of the network 


Example 

Command> delete netmask 192.168.8.0 
Netmask successfully deleted 

See Also 

show table netmask - page 4-23 
add netmask - page 4-25 
save netmask - page 4-24 
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SNMP Configuration 

The commands in Table 4-5 allow you to configure the PortMaster as a Simple 
Network Management Protocol (SNMP) agent. Only use SNMP writes if you 
understand the risks involved. 

Table 4-5 SNMP Commands 


Command Syntax 

show table snmp 


set snmp on 1 off 


save snmp 


set sysname String 

see page 3-20 

set snmp readcommunity 1 writecommunity String 


add snmphost reader 1 writer any 1 none 1 Ipaddress 


delete snmphost reader 1 writer 1 Ipaddress 



Show Table SNMP 

This command shows the settings in the SNMP Table, 
show table snmp 

Usage 

The SNMP Table is used to check the settings for the SNMP read and write 
communities, which should be set so that configuration information is not changed by 
unauthorized users. 

Example 

Command> show table snmp 
SNMP Readers (public): Any 
SNMP Writers (private): None 


SNMP Configuration 
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See Also 

set snmp - page 4-28 
save snmp - page 4-29 

SNMP Support 

This command allows you to enable or disable PortMaster support for SNMP 
monitoring. 

set snmp on I off 

on Enables support for SNMP. 

off Disables support for SNMP. This is the default. 



Usage 

To enable support for SNMP, you must use "set snmp on." 

Note - After enabling or disabling SNMP, you must use the "save snmp" or "save all" 
command and reboot the PortMaster before the change takes effect. 


Example 

Command> set snmp on 

SNMP will be enabled after next reboot 

See Also 

show modules - page 3-33 
show table snmp - page 4-27 
save snmp - page 4-29 
add snmphost - page 4-30 
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Save SNMP 


This command saves the settings of the SNMP parameters in the SNMP Table, 

save snmp 

Usage 

This command writes the SNMP Table settings to the nonvolatile memory of the 
PortMaster. You can also use "save all." 

Example 

Command> save snmp 
SNMP table successfully saved 

See Also 

set snmp - page 4-28 


SNMP Read/Write 


This command allows you to set the read and write community strings used for SNMP 


security. 


set snmp readcommunity I writecommunity String 


readcommunity 

writecommunity 

String 


Use to set the read community. 

Use to set the write community. 

String up to 16 characters long. Default for read is public; 
default for write is private. 


SNMP Configuration 
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Usage 

Community strings allow you to control access to the Management Information Base 
(MIB) information on selected SNMP devices (such as the PortMaster). 

A host must know the read community string to read the MIB information, and must 
know the write community string to set information on the SNMP agent. 

Example 

Command> set snmp read public 
SNMP read community changed to: public 

See Also 

show table snmp - page 4-27 
set snmp - page 4-28 
save snmp - page 4-29 
add snmphost - page 4-30 


Add SNMP Host 


This command allows you to control SNMP security by specifying the addresses of the 
read or write hosts that are allowed to access SNMP information. 

add snmphost reader I writer any I none I Ipaddress 


reader 


Use to add a read host. 


writer 


none 


any 


Ipaddress 


Use to add a write host. 

All hosts using the correct read or write community are 
allowed to read or write SNMP information. 

No SNMP reads or writes are accepted by the PortMaster. 

The IP address of the read or write host. 
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Usage 

The specification of read and write hosts allows another level of security beyond the 
community strings. If SNMP hosts are specified, each host wanting to access SNMP 
information must possess the correct community string and must also be on the read or 
write host list. 

Example 

Command> add snmphost reader 192.168.1.99 
New SNMP reader 192.168.1.99 successfully added 
Command> add snmphost writer none 

See Also 

show table snmp - page 4-27 
set snmp - page 4-28 
save snmp - page 4-29 
delete snmp host - page 4-31 


Delete SNMP Host 

This command allows you to delete read or write hosts that are allowed to access 
SNMP information. 

delete snmphost reader I writer Ipaddress 

reader Use to delete a read host, 

writer Use to delete a write host. 

Ipaddress The IP address of the read or write host. 


Example 

Command> delete snmphost reader 192.168.1.99 
SNMP reader 192.168.1.99 successfully deleted 

See Also 

add snmphost - page 4-30 
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This chapter describes how to use the Command Line Interface to configure the 
Ethernet interface of the PortMaster. Detailed command definitions follow a command 
summary table. 

Examples in this chapter are from a PortMaster PM-2R, which uses EtherO for its 
Ethernet interface. All PortMasters use this same designation. In addition, the IRX-211 
uses Etherl for a second Ethernet interface. 

Displaying Ethernet Data 

To display information about your configuration, use the following commands: 

• show EtherO - see page 3-23 

• ifconfig - see page 3-5 

• show netconns - see page 3-34 

• show netstat - see page 3-35 

• show arp EtherO - see page 3-22 

• show all - see page 3-21 

• show global - see page 3-26 

For general information about Command Line Interface commands, refer to Chapter 2, 
"Introduction." 

Configuring Ethernet Interface Data 

1. At the command line, enter your Ethernet configuration information as in the 
following example: 


Command> set etherO address 172.16.200.1 
Command> set etherO netmask 255.255.255.0 


Displaying Ethernet Data 
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As you press [Enter] following each command, the PortMaster responds by echoing the 
configuration change you have made. For example: 


Command> set etherO address 172.16.200.1 

Local (etherO) address changed from to 172.16.200.1 

For a description of each command, refer to "Description of Ethernet Commands" 
on page 5-3. 

Note - If you change the Ethernet IP address, you must reboot the PortMaster for the 
change to take effect. 


2. When you finish configuring the Ethernet interface, enter the "save etherO" 

command to write your configuration changes to the nonvolatile memory of the 
PortMaster, as follows: 

Command> save etherO 


The "save all" command can also be used. 

Summary of Ethernet Commands 

The Ethernet commands in Table 5-1 configure the Ethernet interfaces EtherO and (on 
the IRX-211) Etherl. 

Table 5-1 Ethernet Configuration 

Command Syntax___ 

set EtherO address Ipaddress 

set EtherO netmask Ipmask 

set EtherO broadcast high I low 

set EtherO routing on I broadcast I listen I off 

set EtherO ipxnet Ipxnetwork 

set EtherO ipxframe ethernet_802.21 ethernet_802.2_ii I ethemet_802.31 ethemetji 
set etherO ip up I down I enabled I disabled 1 

set etherO ipx up I down I enabled I disabled 1 ___ 
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Table 5-1 Ethernet Configuration (Continued) 


Command Syntax 


set EtherO ifilter Filtername 

set EtherO ofilter Filtername 

set EtherO ospf on 1 off 

- see page 11-21 

1. This command is available only on the etherO port, even on the IRX-211. 



Description of Ethernet Commands 

These commands affect the Ethernet interface of the PortMaster. The Ethernet interface 
of the PortMaster is called EtherO on all models. In addition, the IRX-211 has a second 
Ethernet interface, called Etherl. All EtherO commands can be used for Etherl, except 
as noted in this section. 

IP Address 

This command sets the IP address of the Ethernet interface, 
set EtherO address Ipaddress 

EtherO Ethernet interface 

Ipaddress IP address or host name 

Usage 

For more information about setting the IP address, refer to the hardware installation 
guide for your PortMaster. 

Example 

Command> set etherO address 172.16.200.1 
Local (etherO) address changed from to 172.16.200.1 

See Also 

set EtherO netmask - page 5-4 
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IP Netmask 

This command sets the IP netmask used by the Ethernet interface, 

set EtherO netmask Ipmask 

EtherO Ethernet interface 

Ipmask IP netmask 

Usage 

The value of Ipmask defaults according to the class of IP address. 

Example 

Command> set etherO netmask 255.255.255.128 

etherO netmask changed from 255.255.255.0 to 255.255.255.128 

See Also 

set EtherO address - page 5-3 
show table netmask - page 4-23 

IP Broadcast Address 

This command determines which broadcast address the PortMaster will use. 
set EtherO broadcast high I low 
Ethernet interface. 

Use a host part of all ones (example 192.168.1.255) in the 
broadcast address. 

Use a host part of all zeros (example 192.168.1.0) in the 
broadcast address. This is the default. 


EtherO 

high 

low 
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Usage 

This should match the broadcast address used by all hosts and routers on the same 
network segment. 

Example 

Command> set etherO broadcast high 

etherO broadcast address changed from low to high 

See Also 

set default - page 4-9 

Routing 

This command specifies whether the PortMaster broadcasts RIP information to the 
local Ethernet and listens for RIP information from other routers on the local Ethernet. 

set EtherO routing on I broadcast I listen I off 


EtherO 

Ethernet port. 

on 

Broadcast and listen. This is the default. 

broadcast 

Broadcast only. 

listen 

Listen only. 

off 

Neither broadcast nor listen. 

Usage 



PortMasters send and listen for RIP packets if routing is turned on. 

Example 

Command> set etherO routing on 

etherO routing changed from off to on (broadcast,listen) 
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See Also 

set default - page 4-9 
show routes - page 3-36 
show ipxroutes - page 3-28 


IPX Network 

This command sets the IPX network number for the Ethernet interface. 


set EtherO ipxnet Ipxnetwork 


EtherO Ethernet interface 

Ipxnetwork A hexadecimal value 


Usage 

The IPX network number should be entered in hexadecimal format, as shown in the 
example. 

Example 

Command> set etherO ipxnet OOOOOOOf 

etherO IPX network changed from 00000000 to OOOOOOOf 

See Also 

set EtherO ipxframe - page 5-7 

set ipx on - page 4-13 

set user ipxnet - page 12-14 
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IPX Frame Type 

This command sets the IPX frame type. 


A Note - This command should be entered on one line, without any breaks. The line 
break shown here is due to the limited space available. 


set EtherO ipxframe ethemet_802.21 ethemet_802.2_ii I 
ethemet_802.31 ethernet_ii 


EtherO 

ethemet_802.2 

ethernet_802.2_ii 

ethemet_802.3 

ethernet_ii 


Ethernet interface. 

Use Ethernet 802.2 protocol. This is the default encapsulation 
used by Novell NetWare Version 4.0. 

Use Ethernet 802.2_ii protocol. This encapsulation is not 
commonly used. 

Use Ethernet 802.3 protocol. This is the default encapsulation 
used by Novell NetWare Version 3.11. 

Use Ethernet II protocol. This is sometimes used for networks 
that handle both TCP/IP and IPX traffic. 


Usage 

The encapsulation method and frame type were selected when your Novell IPX 
network servers were installed. The PortMaster IPX settings should match those of 
your IPX network. 

Example 

Command> set etherO ipxframe ethemet_ii 
etherO IPX frame type set to ethernet_ii 

See Also 

set EtherO ipxnet - page 5-6 
set ipx on - page 4-13 
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IP 


This command enables or disables the IP protocol on the interface, 
set etherO ip up I down I enabled I disabled 


up 


Enable IP. 


down 


Disable IP. 


enabled 


Enable IP. 


disabled 


Disable IP. 


Usage 

This command is only available on the EtherO interface, even on the IRX-211. The 
default is for the IP protocol to be enabled. 

Example 

Command> set etherO ip enabled 

etherO status for protocol IP changed from Disabled to Enabled 


IPX 

This command enables or disables the IPX protocol on the interface. 


set etherO ipx up I down I enabled I disabled 


up 


Enable IPX. 


down 


Disable IPX. 


enabled 


Enable IPX. 


disabled 


Disable IPX. 
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Usage 

This command is only available on the EtherO interface, even on the IRX-211. 

Example 

Command> set etherO ipx enable 

etherO status for protocol IPX changed from Disabled to Enabled 

See Also 

set ipx on - page 4-13 

Input Filter 

This command sets a packet filter for evaluating packets entering the PortMaster on 
the Ethernet interface. 

set EtherO ifilter Filtername 
EtherO Ethernet interface 

Filtername Input filter name that is in the filter table 


Usage 

The filter must be created before it can be used. Refer to the Configuration Guide for 
PortMaster Products for more information on how to construct a filter. If the filter is 
changed, this command must be re-entered for the changes to be seen by the Ethernet 
interface. 


Neither the interface nor the PortMaster needs to be reset or rebooted for the filter to 
be effective. You remove the filter by entering the command without a filter name. 

Example 

Command> set etherO ifilter etherO.in 
etherO filters enabled: in = etherO.in, out = 
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See Also 

set EtherO ofilter - page 5-10 
show filter - page 14-4 
show table filter - page 14-4 

Output Filter 

This command sets a packet filter for evaluating packets exiting the PortMaster on the 
Ethernet interface. 

set EtherO ofilter Filtername 

EtherO Ethernet interface 

Filtername Output filter name that is in the filter table 

Usage 

The filter must be created before it can be used. Refer to the Configuration Guide for 
PortMaster Products for more information on how to construct a filter. If the filter is 
changed, this command must be re-entered for the changes to be seen by the Ethernet 
interface. 

Neither the interface nor the PortMaster needs to be reset or rebooted for the filter to 
be effective. You remove the filter by entering the command without a filter name. 

Example 

Command> set etherO ofilter etherO.out 

etherO filters enabled: in = etherO.in, out = etherO.out 


See Also 

set EtherO ifilter - page 5-9 
show filter - page 14-4 
show table filter - page 14-4 
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This chapter describes how to use the Command Line Interface to configure 
asynchronous ports. Detailed command definitions follow a command summary table. 
A summary table for the Modem Table commands also appears in this chapter, 
followed by a description of the commands. 

Asynchronous ports can be configured as login, device, or network ports, or any 
combination of these. 


Examples in this chapter are from a PortMaster PM-2R, which uses the indicator SO for 
the first asynchronous port. Some PortMaster models use this same designation for the 
first asynchronous port, while some use the designation CO. See Table 2-1, "Available 
Port Types by PortMaster Model," on page 2-1 for the range of asynchronous ports 
available on each PortMaster model. 

Displaying Asynchronous Port Data 

To display information about your configuration, use the following commands: 

• show SO - see page 3-37 

• show all - see page 3-21 

• ifconfig - see page 3-5 

• show sessions - see page 3-40 

For general information about Command Line Interface commands, refer to Chapter 2 
"Introduction." r 
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Configuring Asynchronous Ports 

1. At the command line, enter your asynchronous port configuration information as 
in this example: 

Command> set sO network dialout 
Command> set sO group 78 
Command> reset sO 
Command> save sO 

As you press [Enter] following each command, the PortMaster responds by 
echoing the configuration change you have made. For example: 


Command> set sO protocol ppp 

Protocol for port SO changed from slip to ppp 


For a description of each command, refer to "Description of Asynchronous 
Commands" on page 6-5. 

2. When you finish configuring the asynchronous port, enter the "save sO" command 
to write your configuration changes to the nonvolatile memory of the PortMaster, 
as follows: 


Command> save sO 


The "save all" command can also be used. 
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Summary of Asynchronous Commands 

The asynchronous port commands in Table 6-1 configure asynchronous serial ports. 
Commands marked with a leading bullet (•) can only be used if the port is configured 
for a dedicated network connection with the "set network hardwired" command. 

Table 6-1 Asynchronous Port Configuration 


Command Syntax 

show all 

- see page 3-21 

show SO 

- see page 3-37 

save SO 

- see page 3-17 

reset SO 

- see page 3-19 

set SO extended on 1 off 


set SO login [device Device] [network dialin 1 dialout 1 twoway] 
set SO device Device [network dialin 1 dialout 1 twoway] 
set SO twoway Device [network dialin 1 dialout 1 twoway] 
set SO network dialin 1 dialout 1 twoway 


set SO network hardwired 


set SO speed [11213] 3001600112001240014800196001192001 
384001576001768001115200 


set SO parity even 1 none 1 odd 1 strip 
set SO databits 5161718 


set SO stopbits 112 

set SO xon/xoff on 1 off 

set SO rts/cts on 1 off 

set SO override xon 1 rts 1 speed 1 parity 1 databits on 1 off 
set SO modem ModemName 

set SO modem 1 cd on 1 off 
set SO group Group 

set SO idletime Number [minutes 1 seconds! 
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Table 6-1 Asynchronous Port Configuration (Continued) 


Command Syntax _ 

set SO security on I off 

set SO message String 

set SO prompt String 

set SO username I autolog String 

set SO hangup on I off 

set SO dialback_delay Seconds 

set SO dtr Jdle on I off 

set SO service_login netdata I portmaster I rlogin I telnet [Tport] 
set SO service_device netdata I portmaster I rlogin I telnet [Tport] 


set SO host default I prompt I Ipaddress 
set SO access on I off 
set SO termtype String 
set SO ifilter Filtername 

• set SO ofilter Filtername 

• set SO protocol slip I ppp 

• set SO address Ipaddress 

• set SO netmask Ipmask 

• set SO destination Ipaddress [Ipmask] 

• set SO mtu MTU 

• set SO routing on I off I broadcast I listen 

• set SO ipxnet Ipxnetwork 

• set SO compression on I off 


set SO map Hex 

cot Cfi I W7 ncnf nn I off 


- see page 


11-22 
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Description of Asynchronous Port Types 

Asynchronous port types are described in Table 6-2. The first three options can be 
combined with the last three options. A port configured as a network hardwired port 
cannot be combined with another port type. 


Table 6-2 Asynchronous Port Types 


Port Type 

Description 

login 

The port is available for a login user establishing a terminal session to 
a host on the network. 

device 

A host on the network can originate a connection to the port; for 
example, from a host to a printer via the PortMaster. 

twoway 

Allows both dial-in and dial-out connections. 

network 

hardwired 

A hardwired connection; for example, a WAN link over a dedicated 
point-to-point asynchronous leased line. 

network 

dialin 

The port is available for a dial-in network user to establish a network 
connection using SLIP or PPP. 

network 

dialout 

The port is available for use by dial-out network locations defined in 
the Location Table. 

network 

1 twoway 

The port is available for both network dial-in and network dial-out. 


Description of Asynchronous Commands 

These commands affect the asynchronous ports of the PortMaster. Table 2-1, "Available 

^ >or f ^yP es b y PortMaster Model, on page 2-1 lists the range of asynchronous ports 
available on each PortMaster model. 
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Extended 

This command sets the extended mode on or off for a single asynchronous port, or for 
all asynchronous ports. 

set SO extended on I off 

on Extended mode on. 

off Extended mode off. This is the default. 


Usage 

When extended mode is on, the "show" command provides more detailed output. 

Example 

Command> set sO extended on 

Extended mode for port SO changed from off to on 

Login 

This command sets a single asynchronous port or all asynchronous ports for a selected 

login service. 

set SO login [device Device] [network dialin I dialout I two way] 

Device Device designation—for example, /dev/ttypO. 

dialin In this mode, the port will accept dial-in-only network 

connections. The remote system is required to enter a user 
name and password. Dial-in network connections are 
controlled by the RADIUS server or the User Table. 
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In this mode, the port becomes available for dialing to remote 
destinations and initiating network connections to those 
destinations. Dial-out network connections are controlled by 
the Location Table. 

In this mode, the port will accept dial-in network connections, 
as well as being available for dial-out to remote destinations. 


Using the set sO login" command without any optional keywords sets the port for 
user login. After being verified, or authenticated, a login session is established to the 
host computer. 

You can set the login service to "network twoway" for all the asynchronous ports 
simultaneously by using the "set all" command as shown in the examples. 

Examples 

Command> set sO login network dialin 

Port type for port SO changed from Login to User Login/Network(dialin) 

Command> set all login network twoway 

Port type for port SO changed from Netwrk to User Login/ Network(twoway) 

Port type for port SI changed from Netwrk to User Login /Network(twoway) 

Port type for port S2 changed from Netwrk to User Login/Network(twoway) 


Port type for port S29 changed from Netwrk to User Login/Network(twoway) 

See Also 

set SO service-login - page 6-27 
set SO device - page 6-8 
set SO host - page 6-29 


dialout 


twoway 

Usage 
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Device 

This command sets a selected asynchronous port to operate as a host-controlled device. 


set SO device Device [network dialin I dialout I twoway] 


Device 

Device designation—for example, /dev/ttypO or 
/dev/network. 

dialin 

In this mode, the port will accept dial-in only network 
connections. The remote system is required to enter a user 
name and password. Dial-in network connections are 
controlled by the RADIUS server or the User Table. 

dialout 

In this mode, the port becomes available for dialing to remote 
destinations and initiating network connections to those 
destinations. Dial-out network connections are controlled by 
the Location Table. 

twoway 

In this mode, the port will accept dial-in network connections, 
as well as being available for dial-out to remote destinations. 

Usage 



In the following example, a PortMaster shared device (/dev/ttypO) is shown. To use 
the PortMaster device service, you must have the PortMaster "in.pmd" daemon 
installed and running on the specified host. Note that two ports cannot have the same 
tty designation. 

Example 

Command> set sO device /dev/ttypO 

Port type for port SO changed from User Login to Host Device(/dev/ttypO) 

See Also 

set SO host - page 6-29 
set SO login - page 6-6 
set SO twoway - page 6-9 
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Two-Way 

This command sets a selected asynchronous port for two-way operation, 
set SO twoway Device [network dialin I dialout I twoway] 


Device 

Device designation—for example, /dev/ttypO or 
/ dev/network. 

dialin 

In this mode, the port will accept dial-in only network 
connections. The remote system is required to enter a user 
name and password. Dial-in network connections are 
controlled by the RADIUS server or the User Table. 

dialout 

In this mode, the port becomes available for dialing to remote 
destinations and initiating network connections to those 
destinations. Dial-out network connections are controlled by 
the Location Table. 

twoway 

In this mode, the port will accept dial-in network connections, 
as well as being available for dial-out to remote destinations. 

Usage 



A PortMaster port can be configured for several different types of operation. For 

example, a port set for login users can also be set to access host devices; this is called 
two-way operation. 

SVP eClfied port win °P erate in User Login mode if carrier is detected on pin 8 of the 
RS-232 connector (DCD). Otherwise, it can be accessed as a host device on the 
computer through "in.pmd" or a Telnet session. 

Example 

Command> set sO twoway /dev/ttypO 

Port type for port SO changed from Login to TwoWay(/dev/ttypO) 

See Also 

set SO device - page 6-8 

set SO login - page 6-6 

set SO network twoway - page 6-10 
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Network Service 

This command sets a single asynchronous port or all asynchronous ports to a network 
service. 

set SO network dialin I dialout I twoway 


dialin 

In this mode, the port will accept dial-in only network 
connections. The remote system is required to enter a user 
name and password. Dial-in network connections are 
controlled by the RADIUS server or the User Table. 

dialout 

In this mode, the port becomes available for dialing to remote 
destinations and initiating network connections to those 
destinations. Dial-out network connections are controlled by 
the Location Table. 

twoway 

In this mode, the port will accept dial-in network connections, 
as well as being available for dial-out to remote destinations. 

Usage 

In any of the three Dial modes, the port can also be configured to support other port 
operations concurrently. If one of the other port types is selected, those port type 
parameters become available. 


You can set the network type to dial-in for all the asynchronous ports simultaneously 
by using the "set all" command as shown in the examples. 


Examples 

Command> set sO network twoway 

Port type for port SO changed from Login to Network(twoway) 
Command> set all network dialin 

Port type for port SO changed from Netwrk to Network(dialin) 
Port type for port SI changed from Netwrk to Network(dialin) 
Port type for port S2 changed from Login to Network(dialin) 


Port type for port S29 changed from Netwrk to Network(dialin) 
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See Also 

set SO device - page 6-8 
set SO login - page 6-6 
set SO twoway - page 6-9 


Network Hardwired 

This command sets a single asynchronous port or all asynchronous ports for a 
permanent network connection that requires no dialing or authentication. 

set SO network hardwired 


Usage 

Use this command for ports used in a dedicated or hardwired network connection 
between two sites. The port immediately begins running the specified protocol. None 
of the other port types can be combined with network hardwired. 

You can set the network hardwired for all the asynchronous ports simultaneously by 
using the "set all network hardwired" command. 

Example 

Command> set sO network hardwired 

Port type for port SO changed from Login to Network(hardwired) 

Speed 

ports C ° mmand S6tS the baUd fate f ° r 3 Single as y nchronous P ort or all asynchronous 


set SO speed [11213] 300160011200124001480019600119200 I 
384001576001768001115200 


t' 213 Indicates which of the three baud rates is being set: 1 2 or 3 

Default is 1. 

3001600, etc. Indicates DTE rate. Default is 9600 bps. 
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Usage 

Modern modems should be set to run at a fixed rate. To define a fixed rate, lock the 
DTE rate by setting all three baud rates to the same value. 

You can set the speed for all the asynchronous ports simultaneously by using the "set 
all speed" command. 

Example 

Command> set sO speed 115200 

Speed for port SO (1) changed from 9600 to 115200 

Command> set sO speed 2 115200 

Speed for port SO (2) changed from UNKNWN to 115200 
Command> set sO speed 3 115200 

Speed for port SO (3) changed from UNKNWN to 115200 

See Also 

set SO modem ModemName - page 6-18 

Parity 

This command sets the parity checking to be used for a single asynchronous port or all 
asynchronous ports. 


set SO parity even I none I odd I strip 


even 


none 


odd 


strip 


Set for even parity. 

Set for no parity bit. This is the default. 

Set for odd parity. 

Set to strip the parity bit from the data stream when it is 
received by the PortMaster. 
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Usage 

When "strip" is selected, the parity bit is removed upon receipt by the PortMaster. For 
most purposes, "none" should be selected. 

You can set the parity for all the asynchronous ports simultaneously by using the "set 
all parity" command. 

Example 

Command> set sO parity none 

Parity for port SO changed from even to none 

See Also 

set SO modem ModemName - page 6-18 
set SO speed - page 6-11 
set SO databits - page 6-13 
set SO stopbits - page 6-14 

Databits 

This command sets the number of databits per byte for a single asynchronous port or 
all asynchronous ports. 

set SO databits 5161718 

5 5 databits. 

6 6 databits. 

7 7 databits. 

8 8 databits. This is the default. 

Usage 

The default of 8 is the most widely used. 

You can set the databits for all the asynchronous ports simultaneously by using the 
set all databits" command. 
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Example 

Command> set sO databits 8 

Data bits for port SO changed from 7 to 8 

See Also 

set SO modem ModemName - page 6-18 
set SO speed - page 6-11 
set SO parity - page 6-12 
set SO stopbits - page 6-14 

Stopbits 

This command sets the number of stop bits in the data frame on a single asynchronous 
port or all asynchronous ports. 

set SO stopbits 112 

1 1 stop bit. This is the default. 

2 2 stop bits. 

Usage 

The default of 1 is the most widely used. 

You can set the stop bits for all the asynchronous ports simultaneously by using the 
"set all stopbits" command. 

Example 

Command> set sO stopbits 1 

Stop bits for port SO changed from 2 to 1 

See Also 

set SO modem ModemName - page 6-18 
set SO speed - page 6-11 
set SO parity - page 6-12 
set SO databits - page 6-13 
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XonIXoff 

This command sets the use of software flow control on a single asynchronous port or 
all asynchronous ports. 

set SO xon/xoff on I off 

on Software flow control on. This is the default, 

off Software flow control off. 


Usage 

The PortMaster uses software flow control, with the ASCII control characters DC1 and 
DC3, to communicate with the attached device to start and stop the flow of data. This 
command should be used only if Ready To Send/Clear To Send (RTS/CTS) flow 
control is not available on the attached device. 

You can set the software flow control for all the asynchronous ports simultaneously by 
using the "set all xon/xoff" command. 

Example 

Command> set sO xon/xoff off 

Xon/Xoff flow control for port SO changed from on to off 

See Also 

set SO modem ModemName - page 6-18 
set SO rts/cts - page 6-16 
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RTSICTS 

This command sets the use of hardware flow control on a single asynchronous port or 
all asynchronous ports. 

set SO rts/cts on I off 

Use hardware flow control on the port. 

Do not use hardware flow control on the port. This is the 
default. 


on 

off 


Usage 

This parameter is used by devices that require hardware flow control. When the 
PortMaster is able to receive data from the attached device, it raises RTS on pin 4 of the 
RS-232 connector. Output from the PortMaster only occurs if the CTS modem line on 
pin 5 of the RS-232 connector is raised by the attached device. 

You can set the hardware flow control for all the asynchronous ports simultaneously 
by using the "set all rts/cts" command. 

Example 

Command> set sO rts/cts on 

RTS/CTS flow control for port SO changed from off to on 

See Also 

set SO modem ModemName - page 6-18 
set SO xon/xoff - page 6-15 
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Override 

This command sets a single asynchronous port or all asynchronous port parameters as 
overrideable by the host in Host Device mode. 

set SO override xon I rts I speed I parity I databits on I off 

on Allow host to override the selected parameter. 

off Do not allow host to override the selected parameter. The 

default is that all overrides are off. 


Usage 

The PortMaster allows overrides to be set for baud rate, parity, databits, and flow 
control. This feature allows the host running "in.pmd " to alter the active parameters 
through software control, by using operating system I/O calls (ioctl calls in UNIX). 

You can set an override parameter for all the asynchronous ports simultaneously by 
using the "set all override" command. 

Example 

Command> set sO override speed on 

Host override of speed for port SO changed from off to on 

See Also 

set SO device - page 6-8 

set SO modem ModemName - page 6-18 

set SO speed - page 6-11 

set SO parity - page 6-12 


Description of Asynchronous Commands 


6-17 









Asynchronous Ports 


Modem Type 

This command selects a modem from the Modem Table, 

set SO modem ModemName 

ModemName Name of modem from the Modem Table 


Usage 

Before you can select a modem name, you must first define the names and associated 
parameters in the Modem Table. (Refer to "Modem Table Configuration" on page 6-40 
for more information.) 

Example 

Command> set sO modem usr-v34 

Modem type for port SO changed from to usr-v34 

See Also 

add modem - page 6-42 
show table modem - page 6-40 

Modem Control 

This command enables the PortMaster to monitor the presence of the data carrier 
detect (DCD) signal on a modem attached to the asynchronous port to determine 
whether the line is in use. 

set SO modem I cd on 1 off 

on Monitor presence of the carrier detect signal. 

off Do not monitor presence of the carrier. This is the default. 
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Usage 

If set "on," the PortMaster tracks the actual state of carrier as input on the port. 

If set "off/' the PortMaster assumes that carrier is always asserted—DCD is high. 

The following options indicate the effect of carrier assertion for each port type: 

• Login. If carrier is not asserted, the port is unavailable. If carrier is asserted, the 
PortMaster initiates authentication and displays a login prompt. 

• Device. If carrier is not asserted, the port is unavailable. If carrier is asserted, the 
port is available for the device service. 

• TwoWay. If carrier is not asserted, the port is available for device services. If carrier 
is asserted, the port will attempt to establish an inbound connection and disable 
the device service. 

• Network Hardwired. If carrier is not asserted, the port is unavailable. If carrier is 
asserted, the port attempts to establish a network connection. 

• Network Dialin. If carrier is not asserted, the port is unavailable. If carrier is 
asserted, the PortMaster initiates authentication and displays a login prompt. 

• Network Dialout. When the port is configured as a network dial-out port, the 
assertion of carrier has no effect, but the transition of carrier from asserted to not 
asserted will cause the port to be reset. 

• Network TwoWay. If carrier is not asserted, the port is available for device services. 
If carrier is asserted, the port will attempt to establish a network connection and 
disable the device service. 

Examples 

Command> set sO modem on 

CD required for port SO changed from off to on 

See Also 

add modem - page 6-42 

show table modem - page 6-40 
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Group 

This command is used assign asynchronous ports to modem pools for use by dial-out 
locations. A group number is assigned to each location in the Location Table. Refer to 
Chapter 13, "Location Table and DLCI Table," for more information. 


set SO group Group 


Group number, from 0 to 99. Default is 0. 


Group 


Usage 

For modem pools to work, each port must be assigned to a dial group, and each 
location must specify a dial group. 

Example 

Command> set sO group 2 

Group number for port SO changed from 0 to 2 

See Also 

set location group - page 13-12 

Idle Timeout 

This command indicates how long the PortMaster should wait after activity stops on a 
single asynchronous port or all asynchronous ports, before disconnecting a dial-in 
connection. 


set SO idletime Number [minutes I seconds] 


Number 


minutes 


Timeout value in minutes or seconds. Any value from 0 to 240. 
The default value is 0. 

Sets the idle time in minutes. This is the default. 


seconds 


Sets the idle time in seconds. 
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Usage 

If the idle time value is set to 0, the idle timer is disabled. 

If set to 1 minute or higher, a dial-in user has five minutes to respond to a login, 
password, or host prompt. If the user does not respond, the port resets, making it 
available to another user. Setting the idle time to 1 minute turns off the idle timer after 
the user logs in. 

You can set the idle time of all the ports simultaneously by using the "set all idletime" 
command as shown in the examples. 

Examples 

Command> set sO idletime 120 

Idle timeout for SO changed from 0 to 120 

Command> set all idletime 30 
Idle timeout for SO changed from 0 to 30 
Idle timeout for SI changed from 0 to 30 
Idle timeout for S2 changed from 0 to 30 


Idle timeout for S29 changed from 0 to 30 

See Also 

add SO modem - page 6-18 

Security 

This command sets the security level for a single asynchronous port or all 
asynchronous ports. 

set SO security on I off 

on Enable security; disable passthrough logins. 

off Disable security; enable passthrough logins. 

This is the default. 
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Usage 

If security is set to "off," any user name that is not found in the User Table is connected 
to the port's host for authentication and login. If security is set to "on," the User Table 
is checked first, and if the username is not found and a RADIUS server is configured, 
RADIUS is consulted. When you are using RADIUS security, this command must be set 
on. 

You can set the security for all the ports simultaneously by using the "set all security" 
command. 

Example 

Command> set sO security on 

Security for port SO changed from off to on 

See Also 

set authentication_server - page 4-18 

Message 

This command sets the login message to be displayed to the user prior to the login 
prompt on a single asynchronous port or all asynchronous ports. 

set SO message String 
String Login message 

Usage 

The value for this parameter is a string of up to 240 characters. New lines are 
designated by the carat symbol ( A ). It can be helpful to include identification 
information in this message. 

You can set the message command for all the ports simultaneously by using the "set all 
message" command. 
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Example 

Command> set sO message Welcome to the Network (PMI/0) 

New message: 

Welcome to the Network (PMI/0) 

For ports: SO 

See Also 

set SO username - page 6-24 
set SO prompt - page 6-23 

Prompt 

This command sets the user login prompt for a single asynchronous port or all 
asynchronous ports. 

set SO prompt String 

String Login prompt. The default is "$hostname login:". 

Usage 

Any printable ASCII characters may be entered, except for quotation marks ("). If the 
string "$hostname" is included in the login prompt, the host name for the port is 
substituted for the string. 

You can set the prompt for all the ports simultaneously by using the "set all security" 
command. 

Example 

Command> set sO prompt $hostname login: 

New Login Prompt: 

$hostname login: 

For ports: SO 

See Also 

set SO username - page 6-24 
set host - page 4-5 
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Username 

This command sets an Autolog name for the asynchronous port, 
set SO username I autolog String 

String Autolog user name 


Usage 

If this command is used, the user will not receive the standard login prompt. Instead, 
the PortMaster will initiate a session to the default host as if the user had typed String 
in response to the login prompt. To disable Autolog give the command "set sO autolog 
without the value String. 

Example 

Command> set sO autolog posales 

Username for port SO changed from off to posales 

See Also 

set SO message - page 6-22 
set SO prompt - page 6-23 

Hangup 

This command controls whether the DTR signal on the port is dropped for 500 
milliseconds after the termination of a user session. 

set SO hangup on I off 

DTR will be dropped after the session terminates. 

This is the default. 

DTR will not be dropped after the session terminates. 


on 

off 
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Usage 

Resetting the port administratively, using the "reset" command, always drops the DTR 
signal. 

Example 

Command> set sO hangup on 

DTR Hangup for port SO changed from off to on 

See Also 

reset SO - page 3-19 

Dialback Delay 

Hiis command sets the delay between the disconnection of a dialback user and the 
time when the PortMaster can dial back to the user to establish a connection. 

set SO dialback_delay Seconds 


Seconds The delay time in seconds. The default is 0. 


Usage 

For some modems that take a long time to reset after DTR drops, it is necessary to 
introduce a dialback delay, so that the modem is ready to accept dial commands after 
the PortMaster has disconnected the user. 

Example 

Command> set sO dialback_delay 5 
Dialback delay for port SO changed from 0 to 5 

See Also 

set user dialback - page 12-8 
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DTR Idle 

Use the DTR idle parameter when you want to connect a PortMaster to a bulletin 
board service (BBS) or other host allowing bidirectional communications. Refer to the 
Configuration Guide for PortMaster Products for more information. 

set SO dtr_idle on I off 

DTR is on, and any DTR drop is for 500 milliseconds. This is 
the default. 

DTR is off. Allows bidirectional communications. 


on 

off 


Usage 

This parameter changes the behavior of the port to better accommodate connecting the 
PortMaster to systems or hosts that do not support TCP/IP, but do have serial ports. 
This type of connection requires that you connect the PortMaster port to the host, 
typically with a null modem cable. 

Example 

Command> set sO dtr_idle off 

DTR Idle for port SO changed from on to off 

See Also 

set SO modem ModemName - page 6-18 
set SO twoway - page 6-9 
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Login Service 

This command sets the network service to use in establishing login sessions for a 
selected asynchronous port, or all asynchronous ports. 

set SO servicejogin netdata I portmaster I rlogin I telnet [Tport] 

Use the netdata login service. 

Use the PortMaster login service to connect to "in.pmd" on the 
login host. This is the default. 

Use remote login to connect to the login host. 

Use Telnet to connect to the login host. Port will display "Press 
Enter to begin login" instead of the login prompt. 

The designated TCP port on the host. 


When you set the port type as "login" or "twoway," you can set the login service 
parameters that specify the login service to be used for login sessions. 

You can set the network service for all the ports simultaneously by using the "set all 
servicejogin" command. 

Example 

Command> set sO servicejogin telnet 

Login service for port SO changed from portmaster to telnet 

See Also 

telnet - page 3-12 

set telnet - page 4-4 

set SO modem ModemName - page 6-18 

set SO service-device - page 6-28 


netdata 

portmaster 

rlogin 

telnet 

Tport 

Usage 
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Device Service 

This command sets the device service to be used by a single asynchronous port or all 
asynchronous ports. 

set SO service_device netdata I portmaster I rlogin I telnet [ Tport ] 


netdata 

portmaster 

rlogin 

telnet 

Tport 


Allow netdata connections to this port from the network. 

Used for host device emulation from a host with the "in.pmd" 
daemon installed. 

Allow rlogin connections to this port from the network. 

Allow Telnet connections to this port from the network. 

The TCP port for the connection. 


Usage 

If the Port Type is "device" or "twoway," you can set the device service. This command 
allows users to connect through the PortMaster to shared devices such as printers or 
modems. 

You can set the device service for all the ports simultaneously by using the "set all 
service_device" command. 

Example 

Command> set sO service_device portmaster 

Device Service for port SO changed from telnet to portmaster 

See Also 

set SO device - page 6-8 
set SO host - page 6-29 
set SO login device - page 6-6 
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Host 

This command sets the login host for a single asynchronous port or all asynchronous 
ports. 

set SO host default I prompt I Ipaddress 


default Use default host setting. 

prompt Display host prompt before the login prompt. The user is 

required to enter a valid host name or Internet address for a 
host on the network. Entering "PPP" or "SLIP" at the prompt 
will return a login prompt. 

Ipaddress A specified IP address or host name of a login host or device 

host. 


Usage 

The login host parameter defines the host to which the user is connected, in one of the 
three ways. 

You can set the login host for all the ports simultaneously by using the "set all host" 
command, as shown in the example. 

Examples 

Command> set sO host prompt 

User will be prompted for host on port SO 

Command> set all host default 
Host changed to default for all ports 

See Also 

set host - page 4-5 
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Access Override 

This command sets the access override for a single asynchronous port or all 
asynchronous ports, and is used in conjunction with the access filter. 

set SO access on I off 

Turn access override on. 

Turn access override off. This is the default. 


on 

off 


Usage 

When set to on, users are allowed to override the port's access filter with their own 
access filter by providing a correct username and password. User access filters must 
first be defined before you can use this option. Refer to the Configuration Guide for 
PortMaster Products for more information on defining access filters. 

You can set the access override for all the ports simultaneously by using the set all 
access" command. 

Example 

Command> set sO access on 

Access Enhancement for port SO changed from off to on 

See Also 

set SO ifilter - page 6-31 

Termtype 

This command sets the terminal type in the user's environment on a single 
asynchronous port or all asynchronous ports. This only works for the rlogin or 
PortMaster login service. 

set SO termtype String 
String Terminal type 


6-30 


Command Line Administrator's Guide—November 1996 






Asynchronous Ports 


Usage 

This optional field is used in either login or two-way mode. When a new session is 
established to the host, this terminal type is set in the user's environment. The terminal 
type should be valid on the host that the user is connected to with the rlogin or 
PortMaster login service. 


You can set the terminal type for all the ports simultaneously by using the "set all 
termtype" command. 

Example 

Command> set sO termtype vtlOO 

Terminal Type for port SO changed from to vtlOO 

See Also 

set SO twoway - page 6-9 
set SO login - page 6-6 

Input Filter 

This command sets an input packet filter for packets entering the PortMaster on a 
single network hardwired asynchronous port, or all network hardwired asynchronous 

ports. The command can also be used to set an access filter for login users on these 
ports. 


set SO ifilter Filtername 


Filtername Input filter name that is in the Filter Table. 


Usage 

When an input filter is specified on a network hardwired port, all packets received 
from the interface will be evaluated against the rule set for this filter. 

This filter is used as an access filter for login users who are prompted for a host, and as 
the input filter for network hardwired ports. Filters become effective when a user logs 
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This setting is not used for dial-in and dial-out networking. Filters for dial-in users are 
set in the User Table or RADIUS, and filters for dial-out locations are set in the 
Location Table. 

You remove the filter by entering the command without a filter name. 

Example 

Command> set sO ifilter sO.in 

Input filter for port SO changed from to sO.in 

See Also 

set SO ofilter - page 6-32 
add filter - page 14-5 



Note - The remaining commands are only used on network hardwired asynchronous 
ports. Dial-in users must use the User Table or RADIUS instead. Dial-out locations 
must use the Location Table instead. 


Output Filter 

This command sets a packet filter for packets exiting the PortMaster on a single 
network hardwired asynchronous port, or all network hardwired asynchronous ports. 

set SO ofilter Filtername 

Filtername Output filter name that is in the Filter Table. 

Usage 

When this command is specified, all packets being sent from the network hardwired 
port are evaluated against the rule set for this filter. Only packets permitted by this 
filter are sent out of the PortMaster. 

You remove the filter by entering the command without a filter name. 

You can set the output filter for all the ports simultaneously by using the set all 
ofilter" command. 
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Example 

command> set sO ofilter sO.out 

Output filter for port SO changed from to sO.out 

See Also 

set sO ifilter - page 6-31 
add filter - page 14-5 

Protocol 

This command sets the transport protocol for a single network hardwired 
asynchronous port, or all network hardwired asynchronous ports. 

set SO protocol slip I ppp 

slip SLIP protocol 

PPP PPP protocol 

Usage 

This command is only used for network hardwired ports. 

You can set the protocol for all the ports simultaneously by using the "set all protocol" 
command. jo r 

Example 

Command> set sO protocol slip 

Protocol for port SO changed from ppp to slip 

See Also 

set SO compression - page 6-38 
set SO mtu - page 6-36 
set debug - page 3-12 
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Address 

This command sets the local IP address of a selected network hardwired asynchronous 
port to create a numbered interface. 

set SO address Ipaddress 
Ipaddress Host name or IP address 


Usage 

Only used for network hardwired ports. If the local IP address is set to 0.0.0.0, the 
PortMaster uses the EtherO IP address for this end of the serial link. 

Example 

Command> set sO address 192.168.7.2 

Port SO local address changed from 0.0.0.0 to 192.168.7.2 

See Also 

set EtherO address - page 5-3 
set reported_ip - page 4-11 


Netmask 

This command sets the IP netmask of the remote router for a network hardwired 
asynchronous port. 

set SO netmask Ipmask 
Ipmask IP netmask 


Usage 

Enter the netmask number in dotted quad notation. 
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Example 

Command> set sO netmask 255.255.255.0 
SO netmask changed from 0.0.0.0 to 255.255.255.0 

See Also 

set EtherO netmask - page 5-4 
set W1 netmask - page 7-7 
set user netmask - page 12-14 
set location netmask - page 13-9 

Destination 

This command sets the IP address of the remote router and the netmask for the 
network hardwired asynchronous port. 

set SO destination Ipaddress [IPntask] 

Ipaddress IP address of remote router 

Ipmask ip netmask 

Usage 

If the destination is set to 255.255.255.255 for PPP connections, the PortMaster attempts 
to learn the remote system IP address. If set to 0.0.0.0, the port is disabled. 

Example 

Command> set sO destination 255.255.255.255 

Port SO destination changed from 0.0.0.0 to 255.255.255.255 

See Also 

set W1 destination - page 7-7 
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MTU 

This command sets the maximum transmission unit (MTU) for a single network 
hardwired asynchronous port, or all network hardwired asynchronous ports. 

set SO mtu MTU 

MTU Valid values for MTU are between 100 and 1520. 

Usage 

The MTU defines the largest frame or packet that can be sent through this port, 
without fragmentation or discard. A packet that exceeds this value is automatically 
fragmented if IP, or discarded if IPX. PPP connections have a maximum of 1520, and 
SLIP connections have a maximum of 1006. For IPX, the MTU should be set to 1500. 

You can set the MTU for all the ports simultaneously by using the "set all mtu" 
command. 

Example 

Command> set sO mtu 1500 

MTU for port SO changed from 0 to 1500 

See Also 

set SO protocol - page 6-33 
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Routing 

This command sets routing for a network hardwired asynchronous port, 
set SO routing on I off I broadcast I listen 


on 

The PortMaster sends and listens for route information (RIP) 
on this port. This is the default. 

off 

The PortMaster neither sends nor listens for route information 
on this port. 

broadcast 

The PortMaster sends route information on this port. 

listen 

The PortMaster listens for route information on this port. 

Usage 



The PortMaster automatically sends and listens for RIP packets to and from the 
hardwired port, if routing is turned on. 

Example 

Command> set sO routing on 

Routing for port SO changed from listen to on (broadcast,listen) 

See Also 

set EtherO routing - page 5-5 

IPX Network 

This command sets the IPX network number for the network hardwired asynchronous 
connection. 

set SO ipxnet Ipxnetwork 

Ipxnetwork IPX network number, 32-bit hexadecimal value 
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Usage 

IPX traffic can be passed through a port if you assign an IPX network number to the 
hardwired network connection. The serial link itself must have a unique IPX network 
number that is different from those at each end of the Ethernet. 


Example 

Command> set sO ipxnet C009C801 

Port SO ipxnet changed from 00000000 to C009C801 

See Also 

set ipx on - page 4-13 
set EtherO ipxnet - page 5-6 
set W1 ipxnet - page 7-8 

Compression 

This command sets Van Jacobson TCP/IP header compression on a network hardwired 
asynchronous port. 

set SO compression on I off 


on 


Enable compression. 


off Disable compression. 


Usage 

Compression must be enabled or disabled the same way on both ends of a SLIP 
connection. For PPP connections, the PortMaster supports both bidirectional and 
unidirectional compression. 


Example 

Command> set sO compression on 
Compression for port SO changed from off to on 
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See Also 

set SO protocol - page 6-33 

set user compression - page 12-16 

set location compression - page 13-13 

Asynchronous Character Map 

This command sets the PPP asynchronous map for the interpretation of nonprinting 
ASCII characters found in the data stream. 

set SO map Hex 

Hex A 32-bit hexadecimal number. The default is 00000000. 


Usage 

The PPP protocol supports the replacement of nonprinting ASCII data in the PPP 
stream. These characters are not sent through the line, but instead are replaced by a 
special set of characters that the remote site interprets as the original characters. The 
PPP asynchronous map is a bit map of characters that should be replaced The 
lowest-order bit corresponds to the first ASCII character NUL and so on. Most 
environments should set the asynchronous map to zero to achieve maximum 
throughput. 

You can set the PPP asynchronous map for all the ports simultaneously by using the 
set all map" command. 

Example 

Command> set sO map c0a86000 

Async Char Map for port SO changed from 0x0 to 0xc0a86000 

See Also 

set SO protocol - page 6-33 
set user map - page 12-20 
set location map - page 13-12 
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Modem Table Configuration 

The Modem Table commands in Table 6-3 are used to view and configure the Modem 
Table which is used to store configuration information for modems you common y 
use. See also the "set modem" commands in the Asynchronous Port Configuration 

table. 

Table 6-3 Modem Table Configuration 

Command Syntax __ _____ 

show table modem 
show modem ModemName 

add modem ModemName(short) ModemName(long) Speed String 

delete mod em ModemName ____-____ 

Note - When the console diagnostic switch is up, the PortMaster does not attempt to 
configure the modem specified for the console port. This allows a terminal to be 
attached to the console even if a modem was previously attached. 

Show Table Modem 

This command displays a table listing the modems currently configured in the Modem 
Table. 

show table modem 



Usage 

The list provides the names of the modems, which can then be used to display details 
of the modem configuration. 
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Example 


Command> show table modem 


Short Name 

Long Name 

Type 

att-v34 

AT&TV.34 

User 

hayes 

HayesOptimaV34 

User 


See Also 

show modem - page 6-41 
add modem - page 6-42 
delete modem - page 6-43 


Show Modem 


IWs command shows configuration information on individual modems that are in 
Modem Table. 


the 


show modem ModemName(short) 


ModemName(short) This is the short name given to the modem when the 

configuration information was added to the Modem Table. 

Usage 

Use the modem short name in the command, exactly as it is listed in the "show table 
modem response. 


Example 

Command> show modem att-v34 
Short Name: att-v34 
Long Name: AT&TV.34 
Optimal Speed: 115200 

Type: User Defined 
Init Script: Send Command 


Wait for Reply 


AT&FS0=1&W 


OK 


Modem Table Configuration 
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See Also 

show table modem - page 6-40 
add modem - page 6-42 
delete modem - page 6-43 


Add Modem 

This command is used to add modem details and configuration information to the 
Modem Table. 

add modem ModemName(short) ModemName(long) Speed String 

ModemName(short) An abbreviated name used to identify the modem. 

ModemName(long) A long name that includes modem information for 

example, manufacturer or model name. Enclose name in 
quotation marks. 

The DTE speed in bps. 

The initialization send/expect string for the modem. Enclose 
the string in quotation marks. Use a "\r" for a carriage 
return, and a carat ( A ) to separate the send and expect 
characters in the string. The PortMaster expects "OK," as 
shown in the example. 


The short and long names are chosen by the user. 

Example 

Command> add modem att-v34 "AT&TV.34" 115200 "AT&FSO=l&W\r A OK" 
New script entry successfully added. 

Modem att-v34 successfully added. 


Speed 

String 


Usage 


6-42 


See Also 

show modem - page 6-41 
show table modem - page 6-40 


Command Line Administrator's Guide— November 1996 





Asynchronous Ports 


Delete Modem 

This command is used to delete a modem entry from the Modem Table, 
delete modem ModemName(short) 


ModemName(short) The abbreviated name used to identify the modem when it 

was added to the Modem Table. 


Usage 

Use the modem short name in the command, exactly as it is listed in the response to a 
show table modem" command. 

Example 

Command> delete modem att-v34 
Modem att-v34 successfully deleted. 

See Also 

show modem - page 6-41 
show table modem - page 6-40 
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This chapter describes how to use the Command Line Interface to configure 
synchronous ports. Detailed command definitions follow a command summary table. 

The Command Line Interface can configure a PortMaster synchronous serial port for 
use with a leased line. Frame Relay, ISDN or Switched 56K. 

These examples are from a PM-2R, where the synchronous port is labeled Wl. The 
synchronous ports on IRX Routers are labeled SI through S4. 

Displaying Synchronous Port Configuration and Status 

To display information about your configuration, use the following commands: 

• show Wl - see page 3-37 

• show all - see page 3-21 

• ifconfig - see page 3-5 

• show sessions - see page 3-40 

• show netstat - see page 3-35 

• show arp - see page 3-22 

For general information about Command Line Interface commands, refer to Chapter 2 
"Introduction." 

Configuring Synchronous Ports 

1. At the command line, enter your synchronous port configuration information as in 
this example: 

Command> set wl network hardwired 
Command> set wl protocol frame 
Command> set wl address 192.168.7.2 


Displaying Synchronous Port Configuration and Status 
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As you press [Enter] following each command, the PortMaster responds by 
echoing the configuration change you have made. For example: 


Command> set wl protocol frame 
Protocol for port Wl changed from to frame 

For a description of each command, refer to "Synchronous Port Configuration" on 
page 7-2. 

2 When you finish configuring the synchronous port, enter the "save wl" command 
to write your configuration changes to the nonvolatile memory of the PortMaster, 
as follows: 


Command> save wl 


"save all" can also be used. 

Synchronous Port Configuration 

The synchronous port commands in Table 7-1 configure synchronous serial ports. 
Commands marked with a leading bullet (•) can only be used for network hardwired 

ports. 


Table 7-1 Synchronous Port Configuration 


Command Syntax 


show all 

- see page 3-21 

show Wl 

- see page 3-37 

save Wl 

- see page 3-17 

reset Wl 

set Wl extended on 1 off 

set Wl network dialin 1 dialout 1 twoway 1 hardwired 

• set Wl protocol ppp 1 frame 

• set Wl address Ipaddress 

• set Wl netmask Ipmask 

- see page 3-19 
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Table 7-1 Synchronous Port Configuration (Continued) 

Command Syntax 

• set W3 destination Ipaddress [Ipmask] 

• set W1 ipxnet Ipxnetwork 

• set W1 routing on I off I broadcast I listen 

• set W1 ifilter Filtername 

• set W1 ofilter Filtername 

• set W1 mtu MTU 

• set W1 lmi Seconds 

• set W1 annex-d Seconds 

• set W1 dlci Dlcijist 
set W1 group Group 
set W1 hangup on I off 

set W1 idletime Number [minutes I seconds] 
set W1 modem I cd on I off 

set W1 speed 960011440011920013840015760017680011152001 
5600016400011344k 11536k 12048k I tl I tie I el 

set SO I W1 ospf on I off . see page 11-22 

Description of Synchronous Commands 

These commands affect the synchronous interface of the PortMaster. Examples in this 
chapter are from a PortMaster PM-2R or PM-2ER, labeled Wl. The PortMaster IRX-114 
uses SI through S4 for synchronous ports. See Table 2-l,"Available Port Types by 
PortMaster Model," on page 2-1 for the range of synchronous ports available on each 
PortMaster model. 

The port type is always set to "network" for synchronous ports. 


Description of Synchronous Commands 
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Extended 

This command sets the extended mode on or off for the synchronous port, 
set Wl extended on I off 


on 

Extended mode on. 

off 

Extended mode off. This is the default. 

Usage 



When extended mode is on, the "show" command provides more detailed output. 

Example 

Command> set wl extended on 

Extended mode for port Wl changed from off to on 

Network 

This command sets the network type for the synchronous port, 
set Wl network dialin I dialout I twoway I hardwired 


dialin 

The port accepts dial-in network connections. The remote 
system is required to authenticate using PAP or CHAP Dial-in 
network connections are controlled by the User Table or the 

RADIUS server. 

A remote host can connect to the port. Used for ISDN or 
switched 56K. 

dialout 

The port is available for dialing to remote destinations and 
initiating network connections to those destinations. Dial-out 
network connections are controlled by the Location Table. 

The port is available for dial-out use by the Location Table 
using V.25bis dialing. Used for ISDN or switched 56K. 
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twoway In this mode, the port accepts dial-in network connections, as 

well as being available for dial-out to remote destinations. 

hardwired This mode is for ports being used in a dedicated network 

connection between two sites. No modem dialing or 
authentication is required. The port immediately begins 
running the specified protocol. The port is connected to a 
synchronous leased line or Frame Relay using a V.35 or 
suitable RS-232 cable. Refer to the appropriate hardware 
configuration guide for more information. 

Usage 

Network service parameters are set on the port when hardwired, in the User Table or 

by RADIUS for dial-in users, and in the Location Table for dial-out locations. 

Example 

Command> set wl network hardwired 

Port type for port Wl changed from Netwrk to Network(hardwired) 

See Also 

set SO network - page 6-10 

Protocol 

This command sets the transport protocol for a network hardwired synchronous port. 


set Wl protocol ppp I frame 

PPP PPP- Used for leased lines, ISDN, and switched 56K 

connections. 

frame Frame Relay. 
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Usage 

Select PPP for direct leased line connections between routers, for ISDN, or for switched 
56K. Select Frame Relay when attaching the port to a Frame Relay network via a Frame 
Relay switch. This command is only used for network hardwired ports. 

Example 

Command> set wl protocol ppp 

Protocol for port Wl changed from frame relay to ppp 

See Also 

set debug - page 3-12 
set Wl lmi - page 7-12 
set Wl annex-d - page 7-13 

Address 

This command sets the local IP address of the network hardwired synchronous port to 
create a numbered interface. 

set Wl address Ipaddress 
Ipaddress IP address 

Usage 

If the local IP address of the port is set to 0.0.0.0 for PPP, the PortMaster will use the 
EtherO IP address for this end of the serial link. If set to 0.0.0.0 for Frame Relay, the port 
is disabled. 

Example 

Command> set wl address 192.168.7.2 

Port Wl local address changed from 0.0.0.0 to 192.168.7.2 

See Also 

set SO address - page 6-34 
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Netmask 

This command sets the IP netmask of the remote router for a network hardwired 
synchronous port. 

set Wl netmask Ipmask 
Ipmask IP netmask 


Usage 

Only used on network hardwired ports. 

Example 

Command> set wl netmask 255.255.255.0 
W1 netmask changed from 0.0.0.0 to 255.255.255.0 

See Also 

set EtherO netmask - page 5-4 
set SO netmask - page 6-34 

Destination 

This command sets the IP address of the remote router and the netmask for a network 
hardwired synchronous port. 

set Wl destination Ipaddress [Ipmask] • 

lpaddress IP address of the remote router 

Ipmask IP mask 

Usage 

If the destination is set to 255.255.255.255 for PPP connections, the PortMaster attempts 
to learn the remote IP address. If set to 0.0.0.0, the port is disabled. 
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Example 

Command> set wl destination 255.255.255.255 

Port Wl destination changed from 0.0.0.0 to 255.255.255.255 

See Also 

set SO destination - page 6-35 


IPX Network 

This command sets the IPX network number for the point-to-point connection on a 
network hardwired synchronous port. 

set Wl ipxnet Ipxnetwork 

Ipxnetwork IPX network number. A 32-bit hexadecimal value. 


Usage 

IPX traffic can be passed through a port if you assign an IPX network number to the 
hardwired network connection. The serial link itself must have an IPX network 
number that is different from those at each end of the Ethernet. 

Example 

Command> set wl ipxnet C009C801 

Port Wl ipxnet changed from 00000000 to C009C801 

See Also 

set ipx on - page 4-13 
set EtherO ipxnet - page 5-6 
set SO ipxnet - page 6-37 
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Routing 

This command sets RIP routing options for a network hardwired synchronous port, 
set Wl routing on I off I broadcast I listen 

The PortMaster sends and listens for route information on this 
port. This is the default. 

The PortMaster neither sends nor listens for route information 
on this port. 

The PortMaster sends route information on this port. 

The PortMaster listens for route information on this port. 

The PortMaster automatically sends and listens for RIP packets to and from the 
hardwired port if routing is turned on. 

Example 

Command> set wl routing on 

Routing for port Wl changed from off (no_broadcast,no_listen) to on (broadcast,listen) 

See Also 

set SO routing - page 6-37 

Input Filter 

This command sets an input packet filter for packets entering the PortMaster on a 
network hardwired synchronous port from a leased line or Frame Relay. 

set Wl ifilter Filtername 

Filtername Input filter name that is in the Filter Table. 


on 

off 

broadcast 

listen 

Usage 


Description of Synchronous Commands 
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Usage 

When specified on a network hardwired synchronous port, all packets received from 
the interface will be evaluated against the rule set for this filter. Only packets that are 
permitted by this filter will be allowed to enter the PortMaster. It should only be set on 
network hardwired ports. If the filter is changed, the port must be reset for the change 
to take effect. 

This setting is not used for dial-in and dial-out networking; filters for dial-in users are 
set in the User Table or RADIUS, and filters for dial-out locations are set in the 
Location Table. 

You remove the filter by entering the command without a filter name. 

Example 

Command> set wl ifilter internet.in 

Input filter for port Wl changed from to internet.in 

See Also 

set Wl ofilter - page 7-10 
add filter - page 14-5 
show table filter - page 14-4 

Output Filter 

This command sets a packet filter for packets exiting the PortMaster on a network 
hardwired synchronous port. 

set Wl ofilter Filtername 

Filtername Output filter name that is in the Filter Table. 


Usage 

When specified, all packets being sent to the network hardwired port will be evaluated 
against the rule set for this filter. Only packets permitted by this filter will be allowed 
to leave the PortMaster. It should only be set on network hardwired ports. If the filter 
is changed, the port must be reset for the changes to take effect. 
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You remove the filter by entering the command without a filter name. 

Example 

Command> set wl ofilter wl.out 

Output filter for port Wl changed from to wl.out 

See Also 

set Wl ifilter - page 7-9 
add filter - page 14-5 
show table filter - page 14-4 

MTU 

This command sets the maximum transmission unit (MTU) for the network hardwired 
synchronous port. 

set Wl mtu MTU 

MTU Valid values for MTU are between 100 and 1520. 

Usage 

The MTU defines the largest frame or packet that can be sent through this port. A 
packet that exceeds this value is automatically fragmented if IP, or discarded if IPX. Set 
the MTU only on network hardwired ports. 

Example 

Command> set wl mtu 1500 

MTU for port Wl changed from 0 to 1500 

See Also 

set Wl protocol - page 7-5 
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LMI 

This command sets the Local Management Interface (LMI) polling interval for a 
network hardwired synchronous port to allow the Frame Relay switch to monitor link 
status. Check with your Frame Relay service provider to determine whether they use 
LMI or Annex-D; both may be referred to as LMI. 

set Wl lmi Seconds 


Seconds Keepalive interval in seconds 


Usage 

When used, the LMI default value is 10 seconds. However, if your telephone company 
chooses another keepalive value, change this value as they instruct you. Annex-D 
keepalives are also available. Enabling LMI (or Annex-D) causes the data link 
connection identifier (DLCI) list to be completed automatically. You can display LMI 
activity using the "set debug 0x51" command. 

Example 

Command> set wl lmi 10 

LMI keepalive timer for Wl changed from 0 to 10 

See Also 

set Wl annex-d - page 7-13 
set Wl dlci - page 7-13 
set debug - page 3-12 
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Annex-D 

This command sets the Annex-D polling interval for a network hardwired synchronous 
port to allow the Frame Relay switch to monitor link status. Check with your Frame 
Relay service provider to determine whether they use LMI or the newer Annex-D; both 
may be referred to as LMI. 

set Wl annex-d Seconds 


Seconds Keepalive interval in seconds. Default is 10. 


Usage 

The Annex-D default value is 10 seconds. However, if your telephone company 
chooses another value, change this value as they instruct you. Enabling Annex-D (or 
LMI) causes the DLCI list to be completed automatically. Setting the interval to zero 
seconds, or enabling LMI, disables Annex-D. 

Example 

Command> set wl annex-d 10 

ANNEX-D keepalive timer for SI changed from 0 to 10 

See Also 

set Wl lmi - page 7-12 
set Wl did - page 7-13 
set debug - page 3-12 

DLCI List 

Use this command to enter DLCIs for Frame Relay service on a network hardwired 
synchronous port. If LMI or Annex-D is not used, you must enter the DLCI list 
manually. Your Frame Relay service provider might provide a DCLI list. 

set Wl dlci Dlcijist 

Dlcijist Space separated list of DLCIs. Up to a maximum of 240 

characters. 
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Usage 

When using Frame Relay, you can enter a list of DLCIs accessible through this interface 
via the Frame Relay Network. The PortMaster will attempt to use Inverse ARP 
requests to learn the IP addresses of routers attached to the permanent virtual circuits 
(PVCs) represented by these DLCIs. Alternatively, you can specify IP addresses by 
appending a colon (:) and IP address after the DLCI. If an address is specified, the 
PortMaster will statically configure that entry into its ARP table for this interface. 

With LMI or Annex-D, DLCIs can be learned dynamically. 

Example 

Command> set wl dlci 16 17 18 
New DLCI List: 16 17 18 

Command> set wl dlci 16:192.168.2.1 17:192.168.2.3 
New DCLI List: 16:192.168.2.1 17:192.168.2.3 

See Also 

set Wl lmi - page 7-12 
set Wl annex-d - page 7-13 
add dlci - page 13-27 

Group 

This command assigns synchronous ports to pools for use by V.25bis dial-out locations. 
A group number is referenced by each location in the Location Table. See page 13-12 
for more information. 

set Wl group Group 

Group Group number, from 0 to 99. Default is 0 

Usage 

In order for pools to work, each port must be assigned to a dial group, and each 
location must specify a dial group. 

Example 
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Command> set wl group 1 

Group number for port Wl changed from 0 to 1 

See Also 

set SO group - page 6-20 
set location group - page 13-12 

Hangup 

This command controls whether the DTR signal on the synchronous port is dropped 
for 500 milliseconds, to cause a hangup after the termination of a user session. 

set Wl hangup on I off 

on DTR is dropped after the session terminates. This is the 

default. 

of{ DTR is not dropped after the session terminates. 


Usage 

Resetting the port administratively, using the "reset" command, always drops the DTR 
signal. 

Example 

Command> set wl hangup on 

DTR Hangup for port Wl changed from off to on 

See Also 

reset Wl - page 3-19 
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Idle Timeout 

This command indicates how long the PortMaster should wait after activity stops on 
the synchronous port before disconnecting. 

set Wl idletime Number [minutes I seconds] 

Number Idle time value in minutes or seconds, as specified. Any value 

from 0 to 240. The default value is 0. 

minutes Sets the idle time in minutes. This is the default. 

seconds Sets the idle time in seconds. 

Usage 

If the idle timeout value is set to 0 or 1 minute, the idle timer is disabled. 

If the value is set in seconds or minutes to 2 or higher, the port is reset after having no 
traffic for the designated time. RIP packets are not counted as traffic. 

Example 

Command> set wl idletime 120 

Idle timeout for Wl changed from 0 to 120 

See Also 

set Wl modem - page 7-17 
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Modem Control 

This command enables the PortMaster to monitor the presence of the data carrier 
detect (DCD) signal on a modem attached to the synchronous port to determine 
whether the line is in use. 

set Wl modem I cd on I off 


Monitor presence of the carrier detect signal. 

Do not monitor presence of the carrier. This is the default. 


Usage 

Modem control defaults to "off" for synchronous connections. In this default state, the 
PortMaster assumes the carrier detect line is always high. 

This parameter should be set to "on" only if you want to make use of the DGD signal 
from the attached device. When set to "on," the PortMaster uses the signal to 
determine if the line is in use. 

For leased lines or Frame Relay, this control is usually set to "off," but can be turned on 
if the CSU/DSU is configured accordingly. 

Example 

Command> set wl modem on 

CD required for port Wl changed from off to on 

See Also 

set SO modem I cd - page 6-18 
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Speed 

This command sets the reference speed for the synchronous port. 

set Wl speed 960011440011920013840015760017680011152001 
5600016400011344k 11536k 12048k I tl I tie I el 


9600114400, etc. Indicates DTE rate in bits per second. 

tl, tie, el Reference for Tl, extended superframe Tl, or El line types. 


Usage 

The external clock on the device to which the PortMaster is connected, or the telco 
network, sets the actual line speed. Speed or line type settings on synchronous ports 
are for administrative notation only and do not affect the operation of the port. 

Example 

Command> set wl speed 64000 

Speed for port Wl changed from 9600 to 64000 

See Also 

set SO speed - page 6-11 
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This chapter describes how to use the Command Line Interface to configure the PO 
parallel port included in some of the PortMaster models. Detailed command 
definitions follow a command summary table. 

Displaying Parallel Port Settings 

The following command is available to show the configuration of the parallel port: 
• show pO - see page 3-37 

Configuring Parallel Port Settings 

To configure port settings: 

1. At the command line, enter your global settings, as in this example: 

Command> set pO extended on 
Command> set pO disabled 
Command> reset pO 

As you press [Enter] following each command, the PortMaster responds by 
echoing the configuration change you have made. For example: 


Command> set pO disconnect 240 

Disconnect timeout for port PO changed from 120 to 240 


2. For a description of each command, refer to "Description of Parallel Port 
Commands" on page 8-3. 
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3. When you finish configuring the port settings, enter the "save pO" command to 
write your configuration changes to the nonvolatile memory of the PortMaster, as 
follows: 


Command> save pO 


"save all" can also be used. 

Summary of Parallel Port Commands 

The parallel port commands in Table 8-1 configure the parallel port PO. See Table 2-1, 
on page 2-1, for the range of ports available on each PortMaster model. 


Table 8-1 Parallel Port Configuration 


Command Syntax 

show all 

- see page 3-21 

show pO 

- see page 3-37 

save pO 

- see page 3-19 

reset pO 

- see page 3-19 

set pO extended on 1 off 


set pO device Device 


set pO disabled 


set pO service_device netdata 1 portmaster 1 rlogin 1 telnet [Tport] 


set pO host default 1 Ipaddress 


set pO disconnect Seconds 1 infinity 
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Description of Parallel Port Commands 

These commands are used to configure the parallel port (PO) of the PortMaster. 

Extended 

This command sets the extended display mode on or off for the parallel port, 
set pO extended on I off 

on Extended mode on. 

off Extended mode off. This is the default. 


Usage 

When extended mode is on, the "show" command provides more detailed output. 

Example 

Command> set pO extended on 

Extended mode for port PO changed from off to on 

Device 

This command sets the parallel port to operate as a host-controlled device, 
set pO device Device 


Device 


Usage 


Device designation—for example, /dev/ttyrf 


In the following example, a PortMaster host device (/dev/ttyrd) is shown. To use the 
PortMaster dev 1C e service, you must have the PortMaster "in.pmd" daemon installed 
on the specified host. 


Description of Parallel Port Commands 
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Example 

Command> set pO device/dev/ttyrd 

Port type for port PO changed from Device to Host Device(/dev/ttyrd) 

Disabled 

This command disables the parallel port, 
set pO disabled 

Usage 

This command disables the parallel port. To enable the port, set it as a host device—for 
example, "set pO device /dev/ttyrd." 

Example 

Command> set pO disabled 

Port type for port PO changed from Device to Disabled 

See Also 

set pO device - page 8-3 

Device Service 

This command indicates device service to be used by the parallel port, 
set pO service_device netdata I portmaster I rlogin I telnet [Tport] 

netdata Allow netdata connections to this port from the network. 


portmaster 


rlogin 


telnet 


Tport 


Used for host device emulation from a host with the "in.pmd 
daemon installed. 

Allow rlogin connections to this port from the network. 
Allow Telnet connections to this port from the network. 

The designated TCP port on the host. 
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Usage 

The host device must be set as the port type for any port that is to act as a 
host-controlled device on a workstation. This capability allows users to connect 
through the PortMaster to shared devices such as printers. 

Example 

Command> set pO service_device portmaster 
Device Service for port PO changed from to portmaster 

See Also 

set pO device - page 8-3 

Host 

This command sets the device host for the parallel port, 

set pO host default I Ipaddress 

default Use the default host as device host. 

Ipaddress IP address or host name of device host. 

Usage 

The host must have the "in.pmd" daemon installed. 

Example 

Command> set pO host 192.168.200.2 

Host changed from default to 192.168.200.2 for PO 

See Also 

set host - page 4-5 
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Disconnect 

This command sets the disconnect timeout for the parallel port. 

set pO disconnect Seconds I infinity 

Seconds Number of seconds. Default is 120. 

infinity Infinite timeout. This effectively disables a disconnect timeout. 

Usage 

The timeout feature disconnects a session from the port when the port has been 
inactive (flow control) for the designated time. The port is then available for other 
sessions. The infinite timeout is useful, for example, for printers that go offline when 
they run out of paper, but that you do not want to disconnect and thereby terminate 

the print job. 

Example 

Command> set pO disconnect 240 

Disconnect timeout for port PO changed from 120 to 240 
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This chapter describes how to use the Command Line Interface to configure ISDN BRI 
ports. Detailed command definitions follow a command summary table. 

Examples in this chapter are from a PortMaster PM-2ER, which uses the indicator S10 
for the first ISDN BRI port when an ISDN expansion module is present. PortMasters 
also use other designations for ISDN BRI ports, depending on the model and 
configuration. Refer to Table 2-1, "Available Port Types by PortMaster Model," on 
page 2-1, for the range of ISDN BRI ports available on PortMaster models. 

Displaying ISDN Port Data 

To display ISDN debug information on the console, use the following commands: 

• set console - see page 3-15 

• set debug isdn on - see page 3-12 

For general information about using the Command Line Interface, refer to Chapter 2 
"Introduction." r 

Configuring BRI Ports 

1. At the command line, enter your ISDN port configuration information as in the 
example: 

Command> set isdn-switch ni-1 
Command> set slO spid 700555111100 
Command> set sll spid 700555111201 
Command> set slO dn 7005551111 
Command> set sll dn 7005551112 


Displaying ISDN Port Data 
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As you press [Enter] following each command, the PortMaster responds by 
echoing the configuration change you have made. For example. 


Command> set slO spid 700555111100 

SPID for port SlO changed from to 700555111100 


For a description of each command, refer to "Description of ISDN BRI Commands 
on page 9-4. 

2. When you finish configuring the ISDN port, enter the "save slO" command to 
write your configuration changes to the nonvolatile memory of the PortMaster, as 

follows: 


Command> save SlO 


"save all" can also be used. 

Summary of ISDN BRI Commands 

ISDN BRI commands allow you to configure the switch provisioning values, including 
the SPID and the directory number (DN). The commands are shown in Table 9-1, 
where those marked with a leading bullet (•) are specifically for ISDN configuration, 
and are described in this chapter. Additionally, ISDN BRI ports can be configured 
similarly to asynchronous and synchronous ports. References are given for the port 
commands not described here. 


Table 9-1 ISDN Port Commands 


Command Syntax 

show all 

- see page 3-21 

show isdn 

- see page 3-29 

show SlO 

- see page 3-37 

save SlO 

- see page 3-17 

reset SlO 

- see page 3-19 

• set isdn-switch ni-11 dms-10015ess 15ess-ptp 


• set isdn-switch net31 vn21 vn31 vn41 ltr61 ntt 1 kdd 
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Table 9-1 ISDN Port Commands (Continued) 


Command Syntax 

set S10 extended on 1 off 

- see page 6-6 

set S10 login [device Device] [network dialin 1 dialout 1 twoway] 

- see page 6-6 

set S10 device Device [network dialin 1 dialout 1 twoway] 

- see page 6-8 

set S10 twoway Device [network dialin 1 dialout 1 twoway] 

- see page 6-9 

set S10 network dialin 1 dialout 1 twoway 

- see page 6-10 

• set S10 spid Number 


• set S10 directory 1 dn Number 


set S10 group Group 

- see page 6-20 

set S10 idletime Number [seconds 1 minutes] 

- see page 6-20 

set S10 security on 1 off 

- see page 6-21 

set S10 message String 

- see page 6-22 

set S10 prompt String 

- see page 6-23 

set S10 username 1 autolog String 

- see page 6-24 

set SI 0 hangup on 1 off 

- see page 6-24 

set S10 dialback_delay Seconds 

- see page 6-25 

set S10 servicejogin netdata 1 portmaster 1 rlogin 1 telnet [ Tport ] 

- see page 6-27 

set S10 service_device netdata 1 portmaster 1 rlogin 1 telnet [Tport] 

- see page 6-28 

set S10 host default 1 prompt 1 Ipaddress 

- see page 6-29 

set S10 termtype String 

- see page 6-30 

set S10 ifilter Filtername 

- see page 6-31 

set S10 ofilter Filtername 

- see page 6-32 | 
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ISDN BRI Ports 


Description of ISDN BRI Commands 

These commands are used for configuring the ISDN BRI ports of the PortMaster. 
Table 2-1, "Available Port Types by PortMaster Model," on page 2-1 lists the range of 
ISDN ports available on each PortMaster model. 

ISDN Switch 

This command sets the switch provisioning for ISDN connections to the PortMaster 
ISDN ports. 

set isdn-switch ni-11 dms-10015ess 15ess-ptp 
set isdn-switch net31 vn21 vn31 vn41 ltr61 ntt I kdd 


ni-1 

National ISDN-1 (NI-1) compliant. This is the default. 

dms-100 

Northern Telecom DMS-100 Custom. 

5ess 

AT&T 5ESS Custom Multi-Point 

5ess-ptp 

AT&T 5ESS Custom Point-to-Point. 

net3 

European ISDN standard (includes Swiss extensions) 

vn2 

France - Older switch 

vn3 

France - Older switch 

vn4 

France - Current National switch 

ltr6 

Germany - Older switch 

ntt 

Japan 

kdd 

Japan 
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Usage 

The switch provisioning information is available from your ISDN telephone service 
provider. DMS-100 and 5ESS switches can operate with either switch-specific software, 
or the more universal NI-1 software. When they have NI-1 software, you must use the 
NI-1 value. Any change you make in the switch provisioning setting does not take 
effect until the PortMaster is rebooted. 

Examples 

For an AT&T 5ESS Custom Multi-Point switch with switch-specific software: 

Command> set isdn-switch 5ess 
ISDN switch type set to ATT-5ESS 
Command> save all 
Command> reboot 

For an AT&T 5ESS Custom Multi-Point switch with NI-1 software: 

Command> set isdn-switch ni-1 
ISDN switch type set to NI-1 
Command> save all 
Command> reboot 

See Also 

set S10 spid - page 9-6 
set S10 directory - page 9-7 
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SPID 

This command sets the Service Profile Identifier (SPID) numbers for the bearer (B) 
channels of the ISDN connection. The SPID numbers for each of the two B channels are 
provided by your ISDN service provider. 

set S10 spid Number 


SlO 

The ISDN port. 

Number 

A number with 9 to 20 digits, provided by the ISDN service 
provider. 

Usage 



The SPID numbers for the two B channels are normally different, and both of the 
corresponding PortMaster ports need to be configured with the correct SPID number. 

Example 

Command> set slO spid 700555111100 

SPID for port SlO changed from to 700555111100 

See Also 

set slO dn - page 9-7 
set isdn-switch - page 9-4 
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DN 

This command is used to set the directory number (DN) for a port. DNs are provided 

by your ISDN telephone service provider. If set, an incoming call that matches this 
number uses this port. 

set S10 directory I dn Number 

slO The ISDN port 

Number The access telephone number 


Usage 

The directory numbers for the two B channels are normally different, and both of the 
corresponding PortMaster ports need to be configured with the correct directory 


Example 

Command> set slO directory 5105551212 

Directory No for port SlO changed from to 5105551212 

Command> set sll dn 5105551213 

Directory No for port Sll changed from to 5105551213 

See Also 

set slO spid - page 9-6 
set isdn-switch - page 9-4 
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10 


This chapter describes how to use the Command Line Interface to configure the ISDN 
PRI lineO and linel on the PortMaster 3. The PortMaster 3 can also use many of the 
commands common to all PortMaster models; for more information, refer to the 
Configuration Guide for PortMaster Products. 

A Note - After making any configuration changes to a line (lineO or linel), you must use 
the save all and "reboot" commands for the changes to take effect. 

Displaying Diagnostic Information 

To display ISDN debug information on the console, use the following commands: 

• set console - see page 3-15 
• set debug isdn on - see page 3-12 
• set debug isdn-d on - see page 3-12 
When finished, use the following commands: 

• set debug off - see page 3-12 
• reset console - see page 3-19 

To display line configuration or status, use the following commands: 

• show global - see page 3-26 
• show LineO - see page 3-30 
• show modems 
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Configuring PortMaster 3 Lines 

1. Set the type of line, then save all and reboot before continuing the configuration, as 
follows: 

Command> set lineO isdn 
Command> save all 
Command> reboot 

As you press [Enter] following each command, the PortMaster responds by 
echoing the configuration change you have made. 

2. If the line uses ISDN, enter your ISDN switch type. For example: 


Command> set isdn-switch att-5ess 
ISDN switch type set to ATT-5ESS 


For installations that limit their use to ISDN, this step completes the on ty 
configuration. The default factory settings, described in "Description of ISDN PR1 
Commands" on page 10-4, are applicable to the most common situations. 

3. When you finish configuring the line, again enter the "save all" command to write 
your configuration changes to the nonvolatile memory of the PortMaster, and 
reboot as follows: 

Command> save all 
Command> reboot 
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Summary of PortMaster 3 Line Commands 


The line configuration commands are shown in Table 10-1. 
Table 10-1 Line Configuration Commands 


Command Syntax 

show LineO 

- see page 3-30 

show modems 


save all 

- see page 3-17 

set LineO isdn 1 tl 1 el 1 fractional 


set isdn-switch ni-21 dms-1001 att-4ess 1 att-5ess 


set isdn-switch net51 vn21 vn31 ltr61 ntt 1 kdd 


set LineO framing esf 1 d41 crc41 fas 1 none 


set LineO encoding b8zs 1 ami 1 hdb3 


set LineO pcm u-law 1 a-law 


set LineO group Cgroup 1 none channels Channel-list 


set LineO group Cgroup 56k 164k 


set MO on 1 off 


set SO directory Number 
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Description of ISDN PRI Commands 

These commands are used for configuring the ISDN PRI T1 or El lines of the 
PortMaster 3. 


Line Use 

This command allows you to use a line as a single T1 or El line or as PRI B channels, 
or to divide the line into groups for use with the "set group" command. 

set LineO isdn I tl I el I fractional 


LineO 

isdn 

tl 

el 

fractional 


lineO or linel. 

Use the line as PRI B channels. This is the default. 

Use the entire line as a Tl. 

Use the entire line as an El. 

Divide the line into groups specified by the "set group" 
command, see page 10-8. 


Example 

Command> set lineO tl 
lineO changed to Tl 

See Also 

set LineO group - page 10-8. 
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ISDN Switch 

This command sets the switch type for ISDN connections to the PortMaster ISDN PRI 
ports. The switch type information is available from your ISDN PRI service provider. 

set isdn-switch ni-21 dms-1001 att-4ess I att-5ess 

set isdn-switch net51 vn21 vn31 ltr61 ntt I kdd 


ni-2 

National ISDN-2 (NI-2) compliant 

dms-100 

Northern Telecom DMS-100 

att-4ess 

AT&T 4ESS 

att-5ess 

AT&T 5ESS 

net5 

European ISDN PRI standard 

vn2 

France 

vn3 

France 

ltr6 

Germany 

ntt 

Japan 

kdd 

Japan 


Example 

Command> set isdn-switch att-5ess 
ISDN switch type set to ATT-5ESS 


Description of ISDN PRI Commands 


10-5 











Configuring the PortMaster 3 


Framing Format 

This command sets the framing format used for the line, 
set LineO framing esf I d41 crc41 fas I none 

LineO lineO or linel. 

es f Extended superframe. This is the default format for T1 

PRI lines. 

d4 D4 framing, alternative format for T1 PRI lines. 

crc 4 Cyclic redundancy check 4. This is the default format 

for El PRI lines. 

f as Frame Alignment Signal, alternative format for El PRI 

lines. 

none No framing, used for clear channel bit stream. 

Example 

Command> set lineO framing esf 
lineO framing successfully changed 
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Encoding Method 


This command sets the encoding method used with T1 and El lines, 
set LineO encoding b8zs I ami I hdb3 


LineO 


lineO or linel. 

Bipolar 8 zero substitution. This is the default for T1 PRI 
lines. 

Alternate mark inversion. 

High-density bipolar 3. This is the default for El PRI lines. 


b8zs 


ami 


hdb3 


Example 

Command> set lineO encoding b8zs 
lineO encoding successfully changed 

Pulse Code Modulation 

This command sets the digital encoding method used for analog signals, 
set LineO pcm u-law I a-law 

LineO lineO or linel 

u-law The default method for T1 PRI lines 

a -law The default method for El PRI lines 

Usage 

This command is only needed when you are using digital modems in the PortMaster 3. 
The default settings should not be changed unless your PRI service provider instructs 
you otherwise. 

Example 

Command> set lineO pcm u-law 
lineO PCM encoding changed to u-law 
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Channel Groups 

This command allows you to divide the T1 or El lines into groups, after the line type 
has been set to "fractional" with the "set lined" command. 


set LineO group Cgroup I none channels Channel-list 


lineO or linel. 

A group number from w2 to w63, or "none" to unassign 
channels. 

A space separated list of one or more channel numbers, from 
1 through 24 for Tl, or 1 through 30 for El. The channel 
numbers do not have to be contiguous. 


LineO 

Cgroup 


Channel-list 


Example 

To allocate channels 1 through 4 of lineO to 256-Kbps synchronous port W2, use the 
following commands: 

Command> set lineO fractional 
Command> save all 
Command> reboot 

Command> set lineO group w2 channels 12 3 4 
Command> set lineO group w2 64k 
Command> save all 
Command> reboot 

Now configure W2 as you would any other PortMaster synchronous port. 

See Also 

set LineO - page 10-4 
set LineO group - page 10-8 
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Channel Rate 

This command allows you to set the channel rate for a group to 56 Kbps or 64 Kbps, 
set LineO group Cgroup 56k 164k 


lineO or linel. 

A defined group from w2 to w63. 

56 Kbps, typically used for D4 framing. 

64 Kbps, used for framing types other than D4. This is the 
default. 


set LineO group - page 10-8 

Modems 

This command allows you to make the digital modems on the PortMaster 3 available 
or unavailable. 


set MO on I off 


MO 

Any modem number from mO to m59. Changes to the 
default setting must be made to individual modems. 

on 

Make the modem available for use. This is the default. 

off 

Busy the modem so it is unavailable. 

Usage 



The digital modems are numbered from mO to m59, for a maximum of 60 modems. 
Modem slot 0 is allocated numbers mO through m9, modem slot 1 is allocated numbers 
mlO through ml9, and so on. Whether eight-port or ten-port modem cards are 
installed, the allocation of numbers to the modem slots does not change. For example, 
an eight-port modem card installed in modem slot 0 would have modems numbered 
mO through m7. Modems on any card installed in modem slot 1 would then start their 
numbering at mlO, with no modems using the labels m8 and m9. 


LineO 

Cgroup 

56k 

64k 

See Also 
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Directory Number 

This command sets a telephone number for an individual port when the line is 
configured as ISDN B channels. 

set SO directory Number 

SO An ISDN port 

Number The access telephone number 


Usage 

Normally a T1 or El line has a single telephone number, however, when the line is set 
up as ISDN B channels this optional command can be used to set a telephone number 
for an individual port. If set, it allows you to identify the circuit telephone number 
associated with a specific ISDN port. 

Example 

Command> set sO directory 5105551212 

Directory No for port SO changed from to 5105551212 

See Also 

set LineO - page 10-4 
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This chapter describes how to use the Command Line Interface to configure the 
PortMaster when using the Open Shortest Path First (OSPF) routing protocol. 

Large OSPF routing tables may require the PortMaster to be upgraded to 4 or 16 
megabytes of memory. See your hardware installation guide for more information. 

Note - After making any configuration changes to the OSPF configuration, you must 
use the "save all" and "reboot" commands for the changes to take effect. 


Displaying OSPF Information 

To display OSPF information on the console, use the following commands: 

• show global - see page 3-26 

• show routes - see page 3-36 

• show memory - see page 3-32 

• ifconfig - see page 3-5, and below 

• show ospf areas 

• show ospf links 

• show ospf neighbors 

For general information about using the Command Line Interface, refer to Chapter 2 
"Introduction." 
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Configuring OSPF 

1. At the command line, enter your OSPF configuration information as in the 
following example: 

Command> set ospf enable 
Command> save all 
Command> reboot 
Command> set ospf priority 1 
Command> add ospf area 0.0.0.0 

Command> set ospf area 0.0.0.0 range 192.168.1.1/24 quiet 
Command> set ospf area 0.0.0.0 external on 

Note — You must issue the “save all” and “reboot” commands (as shown in the 
example above) immediately after issuing the “set ospf enable" command, before you 
can continue with the OSPF configuration. 



As you press [Enter] following each command, the PortMaster responds by 
echoing the configuration change you have made. For example: 


Command> set ospf area 0.0.0.0 external on 
Area successfully updated 


For a description of each command, refer to “Description of OSPF Commands" on 
page 11-4. 

2. When you finish the OSPF configuration, enter the “save ospf" command to write 
your configuration changes to the nonvolatile memory of the PortMaster, and 
reboot as follows: 

Command> save ospf 
Command> reboot 


“save all" can also be used. 
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A Note - The examples in this chapter show OSPF areas in dotted quad notation; 

however, you can also use decimal notation. In the following example, the backbone 
area is entered in decimal notation: 


Command> add ospf area 0 


Summary of OSPF Commands 

OSPF commands allow you to configure the PortMaster to use the OSPF IP routing 
protocol. 

Table 11-1 OSPF Commands 

Command Syntax 

show ospf areas 

show ospf links [router I network I summary I external] 
show ospf neighbor 
save ospf 

ifconfig - see page 3-5 and below 

set ospf enable I disable 

set ospf priority Number 

add ospf area Area 

delete ospf area Area 

set ospf area Area range Ipaddress/NM [advertise I quiet I off] 

set ospf area Area external on I off 

set ospf area Area stub-default-cost Cost 

add route Ipaddress/NM IPaddress(gw) Metric 

set ospf area Area password String 

set ospf area Area md5 Number String 

set ospf router-id IPaddress I Number 
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Table 11-1 OSPF Commands (Continued) 

Command Syntax___ 

set EtherO ospf accept-rip on I off 
set EtherO ospf on I off 
set S0\W1 ospf on I off 
set location Locname ospf on I off 

set debug ospf-hello I ospf-e vent I ospf-lsu I ospf-lsa I ospf-max on I off __ 

Description of OSPF Commands 

These commands are used for configuring OSPF routing protocol on the PortMaster. 

Note - The order of OSPF configuration is very important. First enable the use of OSPF 
on the PortMaster, then set priority (and router ID if desired), then set areas and 
ranges, and finally enable OSPF for the interfaces. 



Show OSPF Areas 

Shows information on the configured OSPF areas, 

show ospf areas 

Examples 

1. A transit area (External Routes = Yes) with simple password authentication and a 


key of "abed." 
Command> show ospf areas 


Area 

Network Range 

Authentication 

Type ID 

Key 

External 

Routes 

Stub 

Default 

Cost 

192.168.96.0 

192.168.96.0/24 

Password 

abed 

Yes 

N/A 


172.16.1.0/24 

192.168.1.0/24 
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2. A stub area (External Routes = No), with an MD5 secret of "defg," a key ID of 15, 
a default route (0.0.0.0), and a cost of 3, being injected into the stub area. 


Command> show ospf areas 




Authentication 



Stub 

Area 

Network Range 

Type 

ID 

Key 

External 

Routes 

Default 

Cost 

192.168.97.0 

192.168.97.0/24 

MD5 

15 

defg 

No 

3 


172.16.1.0/24 

192.168.1.0/24 


3. A stub area, with no default route, a current MD5 secret of "defg," and an MD5 
key ID of 15, being injected into the stub area. This router has learned of two other 
keys since the last "reset ospf" or "reboot" command: key ID 5 with a secret of 
"oldkey," and key ID 3 with a secret of "olderkey." 

Command> show ospf areas 


Area 

Network Range 

Authentication 

Type ID 

Key 

External 

Routes 

Stub 

Default 

Cost 

192.168.97.0 

192.168.97.0/24 

MD5 

15 

defg 

No 

Not Set 


*172.16.1.0/24 

MD5 

5 

oldkey 




*192.168.1.0/24 

MD5 

3 

olderkey 




Explanation 

Area 

Network Range 


Authentication: 


Configured area. 

The list of network ranges configured for the area. Corresponds 
to entries given in "set ospf area range" on page 11-13. An 
asterisk (*) in front of the network range shows that the range 
is "active"—indicating that there are one or more networks 
learned via OSPF intra-area routes that fall into that range. The 
range, therefore, is supported by those networks, and can be 
advertised as an interarea route to other OSPF areas. 

Type Type of authentication: password or MD5. 

ID Key ID number for the MD5 authentication. 
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The password or MD5 secret used to authenticate 
with neighbors in this area. See "set ospf area 
password" on page 11-17, and "set ospf area md5 
on page 11-18. 


External Routes 

Indicates if external routes are flooded into this area. A "No" 
value indicates that the area is a stub area. A "Yes" value 
indicates that the area is a transit area. See the "set ospf area 
external" command on page 11-14. 

Stub Default Cost 

The cost given to the stub route. 

Show OSPF Links 

Shows a summary of the OSPF database with one line per link state advertisement 
(LSA). 

show ospf links [router 1 network 1 summary 1 external] 

router 

Provides more detail for router links 

network 

Provides more detail for network links 

summary 

Provides more detail for summary links 

external 

Provides more detail for external links 

Example 



Command> show ospf links 
Router Links for Area 0.0.0.0 


Link ID 

Advertising Router 

Sequence 

TOS 

Ext 

Age 

192.168.1.1 

192.168.1.1 

0x8000009d 

No 

No 

459 

192.168.1.2 

192.168.1.2 

0x800000b9 

No 

No 

672 

192.168.1.3 

192.168.1.3 

0x800000c5 

No 

No 

1709 

192.168.1.5 

192.168.1.5 

0x800000b8 

No 

No 

398 
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Explanation 

Link ID 

Advertising 

Router 

Sequence 


TOS 

Ext 

Age 


For router links, it identifies the router address. For network 
links, it identifies the designated router address. For 
summary and external links, it identifies the network address 
advertised by the route that those links represent. 

OSPF router ID of the advertisement's originator. 


The link state sequence number used to detect old and 
duplicate link state advertisements (LSAs). Typically, the 
larger the sequence number, the newer the advertisement. 
When a router is rebooted, it may see its old advertisements 
still known to other routers. If so, the router then brings itself 
up-to-date by flooding the network with a new 
advertisement with a sequence number larger than that used 
in the old LSAs. 

Type of service 

YES - This router supports TOS. 

NO - This router does not support TOS. 

Currently only the TOS 0 metric is supported. 

For more information on TOS-based routing, see RFC 1349 
and RFC 1583. 

External. This column indicates if external advertisements 
will be flooded into the area. 

Age of the LSA links in seconds. Links age out in one hour, 
unless they are refreshed with a new (larger) sequence 
number. 
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Show OSPF Neighbor 

Shows information about routers directly accessible through your network interfaces. 


show ospf neighbor 


Example 

Command> show ospf neighbor 
Interface Area Neighbor State 

etherO 192.168.1.0 192.168.1.1 2Way 

etherl 10.0.0.0 10.0.0.1 Full/DR 


Last MD5 

Pri IP Address Hello ID 


0 192.168.1.1 9 N/A 

2 10.0.0.1 3 2 


Explanation 

Interface The interface used to learn about the neighbor. 


Area The area to which the interface belongs. 

Neighbor The router ID of the neighboring router. This might not match its 

IP address. 

State The OSPF state of the neighbor. The possible states are as follows: 

Down: Either the link to the neighbor is down, or hellos are not 
currently being received from the neighbor. 

Init: The connection with this neighbor has been reset, and there 
has been no hello from it that shows it has received a hello from 
this router. 

2Way: A hello has been received from the neighbor that shows it 
can see hellos from this router. 

Exstart: The router is beginning to form an adjacency with this 
neighbor. This state only occurs between a designated router 
(DR) or backup designated router (BDR) and the other routers on 
the network segment they service. Neighbors that are neither DR 
or BDR never go past the 2Way state with each other. 
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State 

(continued) 

Exchange: The router is exchanging current LSA information 
with the neighbor. 

Loading: The router and the neighbor have finished exchanging 
information, and are now updating each other with the LSAs 
they need to share. 

Full: The router and the neighbor are now up-to-date with each 
other, sharing fully identical LSA information. 


Note: The state on Full can be: 

Full This neighbor is not a DR or BDR. 

Full/DR This neighbor is the DR. 

Full/BDR This neighbor is the BDR. 


See the examples of using the "ifconfig" command on page 11-9. 

Pri 

The stated priority of the neighbor. 

IP Address 

The IP address of the neighbor. This might not match the router 
ID. 

Last Hello 

The time in seconds since the router last saw a hello from the 
neighbor. 

MD5ID 

A neighbor may be using one of many MD5 "secrets." This field 
shows which ID of the corresponding MD5 "secret" is being used 
by the neighbor. See "set ospf area md5" on page 11-18. 


Ifconfig 

This command displays configuration values for all interfaces, and is described more 
fully on page 3-5. Examples of output are given here to illustrate how "ifconfig" shows 
OSPF state parameters for the interface, with the identity of the designated router (DR) 
backup designated router (BDR), and other (OTHER) routers on the network. 

Examples 

In the following example this router is the DR: 

Command> ifconfig 

etherO: flags=40106<IP_UP,IPX_DOWN,BROADCAST,PRIVATE,OSPF> 
inet 192.168.200.131 netmask ffffffOO broadcast 192.168.200.0 
area 192.168.200.0 ospf-state DR mtu 1500 
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In the following example this router is the BDR: 

Command> ifconfig 

etherO: flags=40016<IP_UP,IPX_DOWN,BROADCAST,OSPF> 
inet 192.168.200.130 netmask ffffffOO broadcast 192.168.200.0 
area 192.168.200.0 ospf-state BACKUP mtu 1500 

In the following example this router is neither the DR nor the BDR: 

Command> ifconfig 

etherO: flags=40106<IP_UP,IPX_DOWN,BROADCAST,PRIVATE,OSPF> 

inet 192.168.200.129 netmask ffffffOO broadcast 192.168.200.0 
area 192.168.200.0 ospf-state DROTHER mtu 1500 

Save OSPF 

This command writes any changes in the OSPF configuration to the nonvolatile 
memory of the PortMaster. 


save ospf 

Usage 

"save all" can also be used. 

Example 

Command> save ospf 

New configurations successfully saved. 
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Enable or Disable OSPF 

This command enables or disables the use of OSPF on the PortMaster. 

A Note - You must issue the "save all" and "reboot" commands immediately after 

issuing the "set ospf enable" command, before you can continue with any other OSPF 
configuration. 


set ospf enable I disable 


enable 

disable 


This option must be used before OSPF can be configured or 
used on the PortMaster. 

This option disables the use of OSPF on the PortMaster, and 
frees the system memory used by OSPF. 

This is the default. 


Usage 

The "save all" and "reboot" commands must be issued after you use this command 
with either the "enable" or "disable" options. 

Example 

Command> set ospf enable 

OSPF will be enabled after next reboot 


Priority 

This command sets the OSPF priority to determine the designated and backup routers. 


set ospf priority Number 


Number 


Number from 0 to 255. Choosing 0 means that this router will 
refuse to take on the duties of a designated router at any 
time. 0 is the default. 
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Usage 

The priority must be set. If priorities tie, router ID is used as a tie breaker, with the lower 
number winning. 

The higher priority determines which router will be the designated router. This 
calculation is performed on each interface separately. For example, on an IRX-211, the 
router may be the designated router on EtherO, but not on Ether 1. The router with the 
second highest priority on a network segment is chosen as the backup designated 
router. The backup designated router takes over as designated router if the regular 
designated router is unable to perform its duties. 

Examples 

Command> set ospf priority 1 
OSPF priority changed from 5 to 1 

Add OSPF Area 

This command adds an area to the area tables of the router. An area is a contiguous set 
of routers sharing network segments between them 1 . Routers may be in more than one 
area, in which case they are area border routers. All routers must have at least one 
interface in area 0.0.0.0, known as the backbone area. 

add ospf area Area 

A rea The area is specified in dotted quad or decimal notation. 


Usage 

Choose 0.0.0.0 if you only have one OSPF area. 

Example 

Command> add ospf area 0.0.0.0 
New Area successfully added 

See Also 

set ospf area - page 11-13 

1 The use of virtual links to either create a noncontiguous area or allow an area border router to not be directly attached to 
the backbone is not currently supported. 
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Delete OSPF Area 

This command deletes an area from the area table of the router, 
delete ospf area Area 

The area is specified in dotted quad or decimal notation. 


Example 

Command> delete ospf area 0.0.0.0 
Area successfully deleted 

Range 

This command sets the ranges for an OSPF area and optionally, the type of route 
propagation. More than one range can be given to a single area. 

set ospf area Area range Ipaddress/NM [advertise I quiet I off] 


The OSPF area address, specified in dotted quad or decimal 
notation. 

The prefix that all IP addresses within the range will share. 

The netmask that indicates the number of high-order bits in 
the IPaddress that must match addresses to consider those 
addresses within the area. This is a number from 1 to 30, 
preceded by a slash (/)—for example, /24. 

Routes to those networks will be summarized to other areas. 
This is the default. 

Routes to those networks will not be summarized to other 
areas. 

Those networks are removed from the area. 


Area 

Ipaddress 

NM 

advertise 

quiet 

off 
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Usage 

When "advertise" is on for an area border router, a summary link is propagated for 
that range. If set to "quiet," the summary link is not propagated. Only four ranges are 
allowed per area. 

Example 

Command> set ospf area 0.0.0.0 range 192.168.1.0/24 quiet 
Area successfully updated 


External Routes 

This command allows the propagation of external routes into the OSPF area, 
set ospf area Area external on I off 


Area The OSPF area address, specified in dotted quad or decimal 

notation. 

on This is a transit area, 

off This is a stub area. 

Usage 

This command lets you define an area as a transit or stub area. Typically, the backbone 
area (0.0.0.0) is always defined as a transit area. In contrast, a stub area does not attach 
to any area except the backbone, and has no exit other than to the backbone area. As a 
result, external routes are not propagated to stub areas which must be given a defau t 
route to reach external destinations. Use the "set ospf area stub-default-cost command 
to enable an area border router to create and inject default routes to stub areas. 

Example 

Command> set area 0.0.0.0 external off 
Area successfully updated 

See Also 

set ospf area stub-default-cost - page 11-15 
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Stub Area Default Route 

This command enables a border router to create and inject the default route (0.0.0.0) 
into a stub area. When a cost is specified, the default route is advertised to the stub 
area. 

set ospf area Area stub-default-cost Cost 


The address of the OSPF area being configured, it is specified 
in dotted quad or decimal notation. 

The cost given to the default stub route. An integer from 0 to 
15. Setting Cost to 0 disables the command. 


Usage 

Stub areas of an autonomous system can be defined with the "set ospf area external 
off" command. External advertisements are not injected into these stub areas, and 
routing to external destinations is based on a default route for each stub area. This 
command enables area border routers to inject the required default route into a stub 
area, but no further. 

Example 

Command> set area 0.0.0.0 stub-default-cost 4 
Area successfully updated 

See Also 

set ospf area external - page 11-14 


Description of OSPF Commands 


11-15 









Configuring OSPF 


Add Route 

This command adds a static route to the IP Route Table on the PortMaster. 


add route Ipaddress/NM Ipaddress(gw) Metric 


Ipaddress 

The destination address or network. 

NM 

The netmask that indicates the number of high-order bits in the 
IPaddress that are matched against the destination. This is a 
number from 1 to 32, preceded by a slash (/) for example, /24. 

Ipaddress(gw) 

Gateway IP address. 

Metric 

Hop count to the remote destination. 


Usage 

The destination is the IP address of the host or network for which the PortMaster is 
routing. The gateway is the address of a router where packets should be sent for 
forwarding to the destination. The gateway should never be set to any address on the 

PortMaster itself. 

Example 

Command> add route 192.168.1.0/24 172.16.1.1 3 
New route entry successfully added 

See Also 

show routes - page 15-3 
add route - page 15-5 
delete route - page 15-6 
set gateway - page 4-8 
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Password 

This command sets the password for the OSPF area, 
set ospf area Area password String 

The OSPF area address, specified in dotted quad or decimal 
notation. 

Password; an ASCII string of 1 to 8 characters. 

This command sets a password or key to use when you are communicating to other 

routers in the area. Not specifying a password indicates that no password is set for the 
area. 

Example 

Command> set area 0.0.0.0 password gwKGft5% 

Area successfully updated 


Area 

String 

Usage 
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MD5 Authentication 

This command sets the Message-Digest algorithm (MD5) secret for the OSPF area, as 
specified in RFC 1321. 

set ospf area Area md5 Number String 

Area The OSPF area address, specified in dotted quad or decimal 

notation. 


Number 


A key ID number associated with the MD5 secret. An integer 
from 1 to 255. 


String 


MD5 secret; an ASCII string of 1 to 16 characters. 



Usage 

All routers in the area must have the same key number that is associated with the MD5 
secret. 

When an MD5 key number and secret are changed, both the old and the new key 
numbers and secrets remain valid until a PortMaster "reboot" or a reset ospf 
command is issued. This feature facilitates updating of area router information. 

Caution - Do not overwrite the current key number with the same number; doing so 
will cause the secret to be lost immediately. 


Example 

Command> set ospf area 10.0.0.0 md5 6 kjtrewhut 
Area successfully updated 
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Router ID 

This command sets the OSPF router address or ID number, 
set ospf router-id Ipaddress I Number 


Ipaddress The OSPF router address, specified in dotted quad or decimal 

notation. If the router address is set to 0.0.0.0, it defaults to 
the router's Ethernet address. 

Number If the router ID is set to 0, it defaults to the router's Ethernet 

address. 


Usage 

By default the EtherO IP address is used, and Livingston strongly recommends that the 
default be used. 

A Note - Be careful when using this feature. When you set a new router ID, the links 

belonging to an old router ID will have to expire, and routing instability can result for 
one hour until the old links expire. 


Example 

Command> set ospf router-id 0.0.0.0 
OSPF router-id changed from 2.2.23 to 0.0.0.0 

See Also 

set ospf priority - page 11-11 
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RIP Routing 

This command allows the flooding of RIP routes learned on this Ethernet interface into 
OSPF as Type 2 external routes. 

set EtherO ospf accept-rip on I off 

EtherO Ethernet interface, etherO or etherl. 

on Enables the flooding of RIP routes into OSPF. 

off Disables the flooding of RIP routes into OSPF. 

This is the default. 


Usage 

When routers run both RIP and OSPF on a network, the RIP routes learned from other 
routers on a network can be translated into OSPF Type 2 external routes. Use this 
command when you need to enable the flooding of the learned RIP routes into OSPF 

areas. 

However, if the RIP routes learned from the Ethernet interface come from routers that 
are always running OSPF as well as RIP, leave this command set to the "off" default to 
avoid duplicating the route information. 

Example 

Command> set etherO ospf accept-rip on 
EtherO OSPF accept-rip changed from off to on 
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Ethernet 

This command enables or disables OSPF protocol on an Ethernet interface, 

set EtherO ospf on I off 

Ethernet interface, etherO or etherl. 

OSPF is supported on the Ethernet interface. 

OSPF is not supported on the Ethernet interface. 

The order of OSPF configuration is very important. First set priority (and router ID if 
desired), then set areas and ranges, and finally enable OSPF for the interfaces. 

Example 

Command> set etherO ospf on 
EtherO ospf state changed from off to on. 


EtherO 

on 

off 

Usage 
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Asynchronous or Synchronous Port 

This command enables or disables OSPF protocol on an asynchronous or synchronous 
network hardwired port. 

set SO I W1 ospf on I off 


SO 

An asynchronous port. 

m 

A synchronous port. 

on 

OSPF is supported on the port. 

off 

OSPF is not supported on the port. 


Usage 

The order of OSPF configuration is very important. First set priority (and router ID if 
desired), then set areas and ranges, and finally enable OSPF for the interfaces. 

Example 

Command> set wl ospf on 

W1 ospf state changed from off to on. 
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Location 

This command enables or disables OSPF protocol for a Frame Relay subinterface 
location. 

set location Locname ospf on I off 


Locname 

A Frame Relay location name that is in the location table. 

on 

OSPF is supported on a Frame Relay subinterface location. 

off 

OSPF is not supported on a Frame Relay subinterface 
location. 

Usage 



This command is used only with a Frame Relay subinterface. 

Example 

Command> set location hq ospf on 
Location hq ospf changed from off to on. 
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Debug 

This command sets debug flags used for troubleshooting. Debug information is 
displayed to the console. 

set debug ospf-hello I ospf-event I ospf-lsu I ospf-lsa I ospf-max on I off 


ospf-hello 

ospf-event 

ospf-lsu 

ospf-lsa 

ospf-max 


Set "on" to show hello packets sent between neighbors. 

Set "on" to show changes in state between neighbors. 

Set "on" to show link state update packets sent or received. 

Set "on" to show link state acknowledgment packets sent or 
received. 

Set "on" to show all the above OSPF debug information. 


Usage 

The "debug" command is useful for troubleshooting the OSPF protocol. Output is sent 
to the system console set by the "set console" command. After completing t e 
debugging process, disable the debug commands by using the correct set debug off 

command. 
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User Table 12 


This chapter describes how to use the Command Line Interface to configure the User 
Table. Detailed command definitions follow a command summary table. 



The User Table enables the PortMaster to authenticate and provide operational 

parameters on a user-by-user basis. 

You can use the Command Line Interface to create, edit, and delete four kinds of users: 

• Normal network user establishes an immediate active PPP or SLIP connection to the 
network. 

• Dialback network user is immediately disconnected by the PortMaster, which then 
dials back to the user at a predefined location. For more information about 
locations, refer to Chapter 13, "Location Table and DLCI Table." 

• Normal login user begins an active shell session to a host on the network. 

• Dialback login user is immediately disconnected by the PortMaster, which then dials 
back to the user at a predefined telephone number. 

Note - Whenever possible, especially if you have 100 or more users, you should use 

RADIUS for user authentication rather than the User Table. To use RADIUS see 

Chapter 4, "Global Configuration,"and the RADIUS Administrator's Guide. 


Displaying User Table Data 

To display information about your configuration, use the following User Table 
commands: 

• show table user - see page 12-4 

• show user username - see page 12-5 
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Configuring the User Table 

To configure the User Table: 

1. At the command line, enter your User Table configuration information as in this 
example: 

Command> add user karla password weraZqouch 
Command> set user karla dialback 5551212 
Command> add netuser hideo 
Command> set user hideo routing on 

As you press [Enter] following each command, the PortMaster responds by 
echoing the configuration change you have made. For example: 


Command> add netuser kwasi password lmno+vwab 
New User successfully added 


For a description of each command, refer to “Description of User Table Commands, 
on page 12-4. 

2. When you finish configuring the User Table, enter the "save user" command to 
write your configuration changes to the nonvolatile memory of the PortMaster, as 
follows: 


Command> save user 


"save all" can also be used. 
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Summary of User Table Commands 

The User Table commands in Table 12-1 configure the User Table used to authenticate 
dial-in users. RADIUS can also be used to authenticate dial-in users; the User Table is 
always consulted first. 

Table 12-1 User Table Configuration 

Command Syntax 
show table user 
show user Username 
save user 

add netuser Username [password Password] 

add user Username [password Password] 

delete user Username 

set user Username password Password 

set user Username dialback Locname I String I none 

set user Username host default I prompt I Ipaddress 

set user Username service netdata I portmaster I rlogin I telnet [Tport] 

set user Username protocol slip I ppp 

set user Username destination assigned I negotiated I Ipaddress 

set user Username local-ip-address Ipaddress 

set user Username netmask Ipmask 

set user Username ipxnet Ipxnetwork 

set user Username routing on I off I broadcast I listen 

set user Username compression on I off 

set user Username ifilter Filtername 

set user Username ofilter Filtername 

set user Username mtu MTU 

set user Username map Hex 
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Table 12-1 User Table Configuration (Continued) 

Command Syntax __ 

set user Username maxports Number 

set user Username idle Number [minutes I seconds] 

set user Username session-limit Minutes _ 

Description of User Table Commands 

These commands configure the User Table of the PortMaster. 

Show Table 

This command shows the current users in the User Table. 


show table user 


Example 


Command> show table user 


Netmask/ 


Name 

Type 

Address/Host 

Service 

RIP 

bill 

Netuser 

255.255.255.255 

00000000 

No 

hideo 

marie 

Dialback User 

Netuser 

default 

192.168.1.74 

Telnet 

00000000 

No 

kwasi 

Jill 

Login User 
Netuser 

default 

255.255.255.254 

PortMaster 

00000000 

No 


See Also 

show user - page 12-5 
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Show User 

This command shows the configuration of the specified user. 


show user Username 


Username 


A user name of 1-8 characters. 


Example 

Command> show user jack 


Username: jack 
Host: default 


Type: Login User 
Login Service: portmaster 


See Also 

show table user - page 12-4 

Save User 

This command writes any changes in the User Table to the nonvolatile memory of the 
PortMaster. 

save user 

Usage 

"save all" can also be used. 

Example 

Command> save user 

User table successfully saved 

New configurations successfully saved. 
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Add Netuser 

This command adds an entry to the User Table for a network user, 

add netuser Username [password Password] 

Username A network user name of 1-8 characters. 

Password A network user password of 0-16 characters. 

Usage 

A network user must be added to the User Table before other netuser parameters can 
be configured. You cannot add network users with blank network user names. 

Example 

Command> add netuser jaime password lmno+vwab 
New User successfully added 

Note - Set commands can use "user" and "netuser" interchangeably, except that you, 
cannot say "set netuser" for a login user. The "add" command requires "add netuser" 
for network users and "add user" for login users. 



See Also 

delete user - page 12-7 

Add User 

This command adds an entry to the User Table for a login user. Optionally, the user 
password may be added at the same time. 

add user Username [password Password] 

Username A login user name of 1-8 characters. 

Password A login user password of 0-16 characters. 
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Usage 

A user must be added to the User Table before other user parameters can be 
configured. 

Example 

Command> add user sam password yzgixcel 
New User successfully added 

See Also 

delete user - page 12-7 

Delete User 

This command deletes a user or network user, password, and associated information 
from the User Table. 

delete user Username 

Username User name of existing login user or network user 

Example 

Command> delete user sam 
Password successfully deleted 

See Also 

show table user - page 12-4 
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Password 

This command sets the password for a login user or network user. 

set user Username password Password 

Username User name of existing login user or network user. 

Password A user password of 0-16 characters. 


Usage 

As shown in the example, the password is not displayed by any of the responses to a 
"set" or "show" command. 


Example 

Command> set user marie password zasq2-ab 
Username: marie 
Address: Negotiated 
Protocol: SLIP 
MTU: 1006 


Type: Dial-in Network User 
Netmask: 0.0.0.0 
Options: Quiet, Listen 


Dialback 

This command sets the dialback telephone number for a dialback login user, or the 
location for a dialback network user. 

set user Username dialback Locname I String I none 


Username 

User name. 

Locname 

Network user location name. 

String 

Login user dialback telephone number. 

none 

Disables dialback for this user, who becomes a normal login or 
network user. 
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Usage 

For a dialback login user, this is the string of characters that would follow the 
Hayes-compatible ATDT command to dial back to the user. If a telephone number is 
entered, the user is changed to a dialback user. 

For a dialback network user, this is the name of the Location Table entry to establish a 
network connection back to the user. 

Examples 

Command> set user sam dialback 5551212 

Username: sam Type: Login User 

Host: default Login Service: portmaster 

Dialback No: 5551212 


Command> set user mario dialback office 

Username: mario Type: Dialback Network User 

Location: office 

See Also 

set SO dialback_delay - page 6-25 

Host 

This command indicates the login host for the login user, 
set user Username host default I prompt I Ipaddress 

Login user name. 

Connect user to the default host for the serial port. 

Allows the user to select a host (by IP address or name) to 
begin a login session. 

Connects the user to the specified IP address or host name. 


Username 

default 

prompt 

Ipaddress 
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Usage 

The login host parameter defines the host to which the user is connected. 

Example 

Command> set user jack host 192.168.1.2 

Username: jack Type: Login User 

Host: 192.168.1.2 Login Service: portmaster 

See Also 

set host - page 4-5 
set SO host - page 6-29 

Service 

This command selects the login service for the login user. 

set user Username service netdata I portmaster I rlogin I telnet [Tport] 

Name of login user. 

Use netdata connection (TCP clear channel). 

Use PortMaster login service to connect to "in.pmd" on login 
host. This is the default. 

Use the rlogin protocol to connect to login host. 

Use Telnet to connect to login host. 

The designated TCP port on the host. 

Command> set user sam service rlogin 

Username: sam Type: Login User 

Host: default Login Service: rlogin (513) 


Username 

netdata 

portmaster 

rlogin 

telnet 

Tport 

Example 
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See Also 

set SO servicejogin - page 6-27 

Protocol 

This command sets the transport protocol for a network user, 
set user Username protocol slip I ppp 


Username Name of network user. 

sli P SLIP protocol. This is the default. 

PPP PPP protocol. 


Usage 

If a nonzero IP address is set for a network user 
IPX network is set for the user, IPX is routed. 


using PPP, IP is routed. If a nonzero 


Example 


Command> set user mario protocol ppp 
Username: mario 
Address: Negotiated 
Protocol: PPP 
MTU: 1500 


Type: 
Netmask: 
Options: 
Async Map: 


Dial-in Network User 

0.0.0.0 

Quiet, Listen 
00000000 
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Destination 

This command sets the IP address of the network user. 

set user Username destination assigned I negotiated I IPaddress 

Username Name of network user. 

assigned The PortMaster assigns a temporary IP address for this user 

from the assigned pool. 

negotiated This option is valid only for PPP sessions. The PortMaster 

attempts to learn the IP address of the remote host by IP 
Control Protocol (IPCP) negotiation. 

IPaddress Use the indicated IP address. If 0.0.0.0, do not use IP for this 

user. 


Usage 

Address 255.255.255.255 is the same as "negotiated." Address 255.255.255.254 is the 
same as "assigned." 


Example 

Command> set user jaime destination assigned 

Username: jaime Type: 

Address: Assigned Netmask: 

Protocol: PPP Options: 

MTU: 1500 


Dial-in Network User 
0.0.0.0 

Quiet, Listen 


See Also 

set assigned_address - page 4-10 
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Local IP Address 

The PortMaster uses the IP address for the selected user as the IP address on the 
PortMaster serial interface. 


set user Username local-ip-address Ipaddress 

Username Name of network user 

Ipaddress An IP address or host name 

Usage 

This function is not available in RADIUS. In typical usage it is not needed, and should 
be avoided. 


Example 


Dial-in Network User 

0.0.0.0 

Quiet, Compression 
00000000 

See Also 

set user destination - page 12-12 
set reported_ip - page 4-11 


Command> set user rani local-ip-address 192.168.96.6 
Username: rani Type: 


Address: 
Lcl Address: 
Protocol: 
MTU: 


Negotiated 

192.168.96.6 

PPP 

1500 


Netmask: 

Options: 
Async Map: 
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Netmask 

This command defines the netmask of the user's system on the remote end of the 
connection. 

set user Username netmask Ipmask 

Username Name of network user. 

Ipmask IP netmask. The default is O.O.O.O. 

Usage 

Enter the netmask number in dotted quad notation. For more information, see the 
section on netmasks in the Configuration Guide for PortMaster Products. 


Example 


Command> set user jaime netmask 255.255.255.0 

Username: jaime Type: 

Address: Assigned Netmask: 

Protocol: SLIP Options: 

MTU: 1006 


Dial-in Network User 
255.255.255.0 
Quiet, Listen 


IPX Network 

This command sets the IPX network number for the user's network connection. 


set user Username ipxnet Ipxnetwork 
Username Name of network user. 

Ipxnetwork IPX network to be used for serial link, expressed in 

hexadecimal format, up to 8 digits long. 
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Usage 

S^rcr pr l t0 '?' ”? 1 be used with IPX ' If y° u ** the IPX network number to 
FFPFFFFE, the PortMaster assigns an IPX network for the user by using an address 
trom the assigned pool as an IPX network number. 


Example 

Command> set user hideo ipxnet 0f012345 


IPX network set to F012345 



Username: hideo 

Type: 

Dial-in Network User 

Address: Assigned 

IPX Network: 0F012345 

Netmask: 

255.255.255.0 

Protocol: PPP 

MTU: 1500 

Options: 

Quiet, Listen 


See Also 

set assigned_address - page 4-10 
set ipx on - page 4-13 


Routing 

This command sets the routing for a network user. 


set user Username routing on I off I broadcast I listen 


Username 

Name of network user. 

on 

The PortMaster sends and listens for route information to the 
interface established when this user logs in. This is the default. 

off 

The PortMaster neither sends nor listens for route information 
on the interface established when this user logs in. 

broadcast 

The PortMaster sends route information to the interface 
established when this user logs in. 

listen 

The PortMaster listens for route information from the interface 
established when this user logs in. 
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Usage 

The PortMaster automatically sends and listens for RIP packets to and from the remote 
host, if routing is turned on. 

Example 

Command> set user joe routing off 

Username: joe Type: Dial-in Network User 

Address: Negotiated Netmask: 0.0.0.0 

Protocol: SLIP Options: Quiet 


MTU: 1006 


See Also 

set default - page 4-9 


Compression 

This command sets Van Jacobson TCP/IP Header Compression for a network user. 


set user Username compression on I off 


Username 


Network user name 


on 


off 


Enables header compression 
Disables header compression 


Usage 
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Example 

Command> set user joe compression on 
Username: joe 
Address: Negotiated 
Protocol: SLIP 
MTU: 1006 


Type: Dial-in Network User 
Netmask: 0.0.0.0 
Options: Quiet, Compression 


Input Filter 

pus command sets the input packet filter for packets 
interface established by the network user. 


entering the PortMaster on the 


set user Username ifilter Filtername 


Username 

Filtername 


Name of network user. 

Input filter name that is in the Filter Table. 


Usage 

When an input packet filter is specified, all packets received from the serial interface 

Fr:^ e oT nSt , th f T Set f ° r thiS filter ' which has been defined anJ is in the 
^mIsS.' 7 P 3re Permitted b y this filter are allowed to enter the 


Win CCeSS C ° ntro1 filter ' usin § a valid filter n ame from the Filter Table, can be set for 
login users to restrict which hosts they can log into, as follows: 

• The user logs in and specifies a host. 

The host address is compared against the access filter. 

' ^ecfonTdeS"^ ^ ' he ’ he C ° nneC,1 ° n “ eS,ablish « 1 ' <*'“•’■* the 
You remove the filter by entering the command without a filter name. 
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Example 

Command> set user joe ifilter student.in 


Type: Dial-in Network User 
Netmask: 0.0.0.0 
Options: Quiet, Compression 


Username: joe 
Address: Negotiated 
Protocol: SLIP 


Negotiated 


MTU: 1006 

Packet Filters: student.in/ 

See Also 

set user ofilter - page 12-18 
set user host prompt - page 12-9 
add filter - page 14-5 


Output Filter 

This command sots the output packet filter for packets leaving the PortMaster on the 


interface established by this dial-in network user, 

set user Username ofilter Filtername 


Name of network user. 

Output filter name that is in the Filter Table. 


Username 


Filtername 


Usage 

When an output p 
evaluated against 
Table. Only packet 
PortMaster. 



You remove the filter by entering the command without a filter name. 
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Example 

Command> set user joe ofilter student.out 
Username: joe 
Address: Negotiated 
Protocol: SLIP 
MTU: 1006 

Packet Filters: /student.out 

See Also 

set user ifilter - page 12-17 
add filter - page 14-5 


Type: Dial-in Network User 
Netmask: 0.0.0.0 
Options: Quiet, Compression 


MTU 


This command sets the maximum transmission unit (MTU) for the network 

set user Username mtu MTU 


user. 


Username Name of network user 

MTU MTU value from 100 to 1520 bytes 

Usage 

mtu ° f 1520 ^ 

Example 

Command> set user joe mtu 1500 
Username: joe 
Address: Negotiated 
Protocol: PPP 
MTU: 1500 


Packet Filters: student.in/student.out 


Type: Dial-in Network User 
Netmask: 0.0.0.0 
Options: Quiet, Compression 
AsyncMap: 00000000 


Description of User Table Commands 


12-19 











See Also 

set user protocol - page 12-11 

Asynchronous Character Map 

This command sets the PPP asynchronous map to escape nonprinting ASCII characters 
found in the data stream. 

set user Username map Hex 
Username Name of network user. 

rr A 32-bit hexadecimal number. The default is 00000000. 


Usage 

The PPP protocol supports the replacement of nonprinting ASCII data in the PPP 
Seam These characters are not sent through the line, but instead are replaced by a 
special set of characters that the remote site interprets as the original characters. 
PPP asynchronous map is a bit map of characters that should be replaced Jhe 
fowest-order bit corresponds to the first ASCII character NUL and so on. Most 
environments should use the default. 


Example 

Command> set user joe map 00000001 
joe 


Username 

Address: Negotiated 
Protocol: PPP 
MTU: 1500 

Packet Filters: student.in/student.out 


Type: 
Netmask: 
Options: 
Async Map: 


Dial-in Network User 

0.0.0.0 

Quiet, Compression 
00000001 
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User Table 


Maxports 


^ 1S p C °^ m T d ' f if S f \ ! imitS the number of network dial-in ports the user can use on 
the Por Master for Multilink V.120, Multilink PPP, and asynchronous multiline 
load-balancing. 


set user Username maxports Number 


Username Name of user 

Number A number between 0 and 60 


Usage 

If the number of dial-in ports is left unconfigured, port limits are not imposed and 
Livingston s multiline load-balancing. Multilink V.120, and Multilink PPP sessions are 
allowed. You can also set the dial-in port limit using the RADIUS Port-Limit attribute 


Example 

Command> set user joe maxports 2 
Username: joe 
Address: Negotiated 
Protocol: PPP 
MTU: 1500 
Port Limit: 2 


Type: 
Netmask: 
Options: 
Async Map: 
Idle Timeout: 


Dial-in Network User 

0.0.0.0 

Quiet, Compression 
00000000 
0 


See Also 

set location maxports - page 13-25 
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/ 


Idle Timeout 

This command sets the length of time the line can be idle—in both directions—before 
the PortMaster disconnects the user. 

set user Username idle Number [minutes I seconds] 


Number 

minutes 

seconds 


Timeout value from 0 to 240. The default value is 0. 
Sets the idle time in minutes. This is the default. 
Sets the idle time in seconds. 


Usage 

You can set user idle timeout in the User Table using this command, or you can use the 
RADIUS Idle-Timeout attribute. The RADIUS attribute is specified in seconds, but 
when greater than 240 seconds it is rounded up to minutes by the PortMaster. 


Examples 

Command> set user joe idle 30 
Username: joe 
Address: Negotiated 
Protocol: PPP 
MTU: 1500 
Port Limit: 2 


Type: Dial-in Network User 
Netmask: 0.0.0.0 
Options: Quiet, Compression 
Async Map: 00000000 
Idle Timeout: 30 


See Also 

set user session-limit - page 12-23 
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Session Limit 


This command sets the 
disconnects the user. 


maximum length of a session permitted before the PortMaster 


set user Username session-limit Minutes 


Username 

Name of user. 

Minutes 

Session limit in minutes, any value from 0 to 240. 
The default is 0. 

Usage 



SZS5S&Z T i0n l ! m “ i ,he User Table usin « this command, or you can uso 
he R ADI US Session-Timeout attribute. The RADIUS attribute is specified in seconds 
but is rounded up to minutes by the PortMaster. P dS ' 


Examples 


Command> set user joe session-limit 60 
Username: joe 
Address: Negotiated 
Protocol: PPP 
MTU: 1500 
Port Limit: 2 
Session Lim: 60 


Type: 
Netmask: 
Options: 
Async Map: 
Idle Timeout: 


Dial-in Network User 

0.0.0.0 

Quiet, Compression 
00000000 
30 


See Also 

set user idle - page 12-22 
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Location Table and DLCI Table 13 


This chapter describes how to use the Command Line Interface to configure the 
Location Table used for dial-out network connections. Detailed command definitions 
follow a command summary table. A summary table and details for the data link 
connection identifier (DLCI) Table, used for Frame Relay subinterfaces, are also 
described. 


Displaying the Location Table 

Use the following commands to display information about the Location Table: 

• show table location - see page 13-4 

• show location Locname - see page 13-4 

• dial Locname -x - see page 3-7 

• ifconfig - see page 3-5 

Configuring the Location Table 

To configure the Location Table: 

1. At the command line, enter your Location Table information as in this example: 

Command> add location denver 
Command> set location denver manual 
Command> set location denver protocol ppp 

As you press [Enter] following each command, the PortMaster responds by 
echoing the change you have made, as in the following example: 

Command> set location denver routing on 

denver routing changed from off to on (broadcast,listen) 


Displaying the Location Table 
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The maximum number of network dial-out ports should be the last setting you 
make for the Location Table. For information on setting this value see page 13-25. 
When the maximum number of network dial-out ports is set greater than 0, the 
location is available for use. 

For a description of each command, refer to "Description of Location Table 
Commands," on page 13-4. 

2. When you finish configuring the Location Table, enter the Save command to write 
your configuration changes to the nonvolatile memory of the PortMaster, as 
follows: 

Command> save location _ 

"save all" can also be used. 

Summary of Location Table Commands 

The Location Table commands in Table 13-1 are used to configure the Location Table, 
used for network dial-out. 

Table 13-1 Location Table Commands _ 

Command Syntax ___.-- 

show table location 
show location Locname 
save location 
add location Locname 
delete location Locname 

set location Locname continuous I manual I on_demand 
set location Locname protocol slip I ppp I frame 
set location Locname destination Ipaddress 
set location Locname netmask Ipmask 
set location Locname ipxnet Ipxnetwork 

set location Locname routing on I off 1 broadcast I listen _ _.— 
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Table 13-1 Location Table Commands (Continued) 
Command Syntax 


set location Locname group Group 

set location Locname map Hex 

set location Locname compression on I off 

set location Locname mtu MTU 

set location Locname script I v25bis RuleNumber Stringl String2 

set location Locname telephone String 

set location Locname username Username 

set location Locname password Password 

set location Locname voice on I off 

set location Locname chap on I off 

set location Locname high_water Number 

set location Locname idletime Number [minutes I seconds] 

set location Locname ifilter Filtername 

set location Locname ofilter Filtername 

set location Locname multilink on I off 

set location Locname maxports Number 

set location Locname ospf on I off 

- L -------- see page 11-23 


Summary of Location Table Commands 


13-3 












Location Table and DLCI Table 


Description of Location Table Commands 

These commands configure the Location Table of the PortMaster. 


Show Table Location 

Network dial-out destinations are configured using the Location Table, 
shows the current entries in the Location Table. 


This command 


show table location 


Example 


Command> show table location 

Location Destination Netmask 

Group 

Maxconn 

hq 

172.16.1.1 

255.255.255.0 

1 

4 

sf 

192.168.1.21 

255.255.255.0 

99 

1 

subl 

192.168.3.1 

255.255.255.0 

2 

0 

bsp 

172.16.1.21 

255.255.255.0 

99 

1 


Type 


On Demand 
Manual 
Manual 
Manual 


See Also 

show location - page 13-4 


Show Location 

This command displays the configuration of the specified location. 


show location Locname 


Locname 


Name of a remote location, up to 12 characters long 
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Example 

Command> show location hq 


Location: 

hq 

Type: 

Manual 

Destination: 

Negotiated 

Netmask: 

255.255.255.0 

Protocol: 

PPP 

Options: 

Quiet, Compression 

Group: 

0 

Max Ports: 

0 

Idle Timeout: 

0 minutes 

High Mark: 

0 bytes 

Mtu: 

1500 

Async Map: 

00000000 


See Also 

show table location - page 13-4 


Save Location 


This command writes any changes 
the PortMaster. 


to the Location Table to the nonvolatile memory of 


save location 


Usage 

"save all" can also be used. 


Example 

Command> save location 
Location table successfully saved 
New configurations successfully saved. 


Add Location 


This command adds a location to the Location Table. 


add location Locname 


Locname 


Name of a remote location, up to 12 characters long 
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Usage 

The location name is usually an identifier that represents an entire location, for 
example, a city or a company name at that location. It is not usually the name of a 

single system. 


Example 

Command> add location hq 
Location hq successfully added 


See Also 

show table location - page 13-4 
save location - page 13-5 
delete location - page 13-6 


Delete Location 

This command deletes a location from the Location Table. 


delete location Locname 

Locname A previously created location name that is in 

Table. 


the Location 


Example 

Command> delete location hq 
Location hq successfully deleted 

See Also 

show table location - page 13-4 
save location - page 13-5 
add location - page 13-5 
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--- Location Table and DLCI Ta ble 

Set Location 

This command modifies configuration parameters for the specified location, 

set location Locname continuous I manual I on_demand 


Locname 

A location name that is in the Location Table. 

continuous 

The PortMaster dials out to the location at boot time, and 
redials after a delay of 30 seconds if the connection drops. 

manual 

The PortMaster dials to the remote location when the 
administrator uses the "dial" command or pmdial UNIX 
utility. This keyword is also used for network dialback users. 

This is the default. 

on_demand 

The PortMaster dials to the remote location when packets are 
queued for that location. 

Usage 


continuous 

If the telephone connection is lost, the PortMaster redials to 
that location. The redial mechanism in continuous mode is 
based on a back-off algorithm that begins at 30 seconds and 
continues forever. 

manual 

The request for connection can use the "dial" command, or it 
can be invoked from the pmdial utility installed on a UNIX 
host on the network. You can schedule connections by using 
the UNIX cron scheduler to call pmdial. 

on_demand 

The PortMaster creates a network interface and the appropriate 
routing information to notify attached networks of the 
connectivity to the remote site. The PortMaster can perform 

these tasks whether or not an actual physical connection exists 
to that site at the time. 

When changing a location from manual to on-demand, make 
sure to close the dial-out connection by resetting the serial port 
before updating the Location Table. 
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Example 

Command> set location hq on_demand 
hq changed to On-Demand Dial 

See Also 

set location idletime - page 13-21 
reset dialer - page 3-19 

Protocol 

This command sets the protocol fo, encapsulating packets, for the specified location. 

set location Locname protocol slip I ppp I frame 

A location name that is in the Location Table. 

SLIP protocol. 

PPP protocol. 

Frame Relay subinterface. 


Locname 

slip 

PPP 

frame 


Usage 

PPP can be used with either or both IP and IPX packet routing. 

Example 

Command> set location hq protocol ppp 
hq protocol changed to ppp 

See Also 

add dlci - page 13-27 

set location mtu - page 13-14 
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Destination 

This command sets the IP address expected for the system at the remote end of the 
dial-out connection. 

set location Locname destination Ipaddress 

Locname A location name that is in the Location Table. 

Ipaddress IP address or host name. 

Usage 

For SLIP connections, the IP address or a valid host name of the system at the remote 
end of the dial-up connection should be entered. For PPP connections, the destination 
can be specified or negotiated. Assigned addresses are not supported for dial-out 
locations. To negotiate the address, use 255.255.255.255. 

Example 

Command> set location hq destination 192.168.1.1 
hq destination changed from 0.0.0.0 to 192.168.1.1 

Netmask 

This command sets the IP netmask expected for the host or network at the remote end 
of the dial-out connection. 

set location Locname netmask Ipmask 

Locname A location name that is in the Location Table. 

Ipmask ip netmask. The default is O.O.O.O. 

Usage 

Enter the netmask number in dotted quad notation. For more information, see the 
section on netmasks in the Configuration Guide for PortMaster Products. 
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Example 

Command> set location hq netmask 255.255.255.0 
hq netmask changed from 0.0.0.0 to 255.255.255.0 

IPX Network 

This command sets the IPX network number for the point-to-point connection, 
set location Locname ipxnet Ipxnetzvork 


Locname 

A location name that is in the Location Table. 

IPXnetwork 

IPX network number in hexadecimal, up to 8 digits. 

Usage 



Specify this number only if you are routing IPX across the link. The number is only 
used for the serial link itself, and must be different from the IPX network numbers 
used for Ethernets at either end. 

Example 

Command> set location home ipxnet 0f012345 
IPX network set to F012345 

See Also 

set ipx on - page 4-13 
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Routing 

This command sets routing for the selected location. 

set location Locname routing on I off I broadcast I listen 


Locname 

A location name that is in the Location Table. 

on 

The PortMaster sends and listens for route information from 
this network interface when it is established. 

off 

The PortMaster neither sends nor listens for route information 
from this network interface when it is established. 

This is the default. 

broadcast 

pie PortMaster sends route information to this network 
interface when it is established. 

listen 

The PortMaster listens for route information from this network 
interface when it is established. 

Usage 



Locations can have routing associated with them—for example, a dial-on-demand 
connection where the remote router is defined as a location on the local PortMaster. If 
routing is not set to "off" in an on-demand location, the PortMaster dials out to the 
location at boot time to perform routing, and hangs up when the idle timer expires. 
RIP packets do not affect the idle timer. r 


Example 

Command> set location hq routing on 

hq routing changed from off to on (broadcast,listen) 
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Group 

This command defines which network dial-out ports can be used for a specified 
location. 

set location Locname group Group 

Locname A location name that is in the Location Table. 

Group Dial group from 0 to 99. The default is 0. 

Usage 

Each location has a dial group number. Ports configured with this dial group number 
are available for dial-out to this location. This command can be used to reserve ports 
for dial out to specific locations, or to differentiate among different types of modems 
that are compatible with the remote location. 

Example 

Command> set location hq group 1 
hq group number changed from 0 to 1 

See Also 

set SO group - page 6-20 
set W2 group - page 7-14 

Asynchronous Character Map 

This command sets the PPP asynchronous map. 

set location Locname map Hex 

Locname A location name that is in the Location Table. 

H ex A 32-bit hexadecimal number. 
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Usage 

The PPP protocol supports the replacement of nonprinting ASCII data in the PPP 
stream. These characters are not sent through the line, but instead are replaced by a 
special set of characters that the remote site interprets as the original characters. The 
PPP asynchronous map is a bit map of characters that should be replaced. The 
lowest-order bit corresponds to the first ASCII character NUL and so on. Most 
environments should set the asynchronous map to zero to achieve maximum 
throughput. 

Example 

Command> set location hq map 0 

hq async character map changed to 0x00000000 

Compression 

This command sets the use of Van Jacobson TCP/IP header compression for the 
location, improving interactive session performance on slow lines. 


set location Locname compression on I off 


Locname 

on 

off 


A location name that is in the Location Table. 
Enable compression. This is the default. 
Disable compression. 


Usage 

Do not use header compression with multiline load-balancing or fast synchronous 
lines. For SLIP connections, both sides need to be configured identically. For PPP 
connections, the PortMaster supports both unidirectional and bidirectional 
compression. 


Example 

Command> set location hq compression on 
hq header compression changed from off to on 
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MTU 

This command sets the maximum transmission unit (MTU) for the location. 

set location Locname mtu MTU 

Locname A location name that is in the Location Table. 

MTU MTU value, from 100 to 1520 bytes. 

Usage 

The MTU defines the largest frame or packet that can be sent through this port, 
without fragmentation. A packet that exceeds this value is automatically fragmented if 
IP, or discarded if IPX. PPP connections have a maximum MTU of 1520 bytes, and SLIP 
connections have a maximum of 1006 bytes. 

Example 

Command> set location denver mtu 1006 
denver mtu changed from 1500 to 1006 

See Also 

set location protocol - page 13-8 

Script 

This command sets up a dial script for dialing to a remote location, 
set location Locname script I v25bis RuleNumber Stringl String2 

A location name that is in the Location Table. 

Set up dial script for dial-out on an asynchronous port. 

Set up dial script for synchronous V.25bis protocol dial-out, for 
switched 56K or ISDN. 


Usage 

Locname 

script 

v25bis 
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RuleNumber Rule number, from 1 up. Use rule number 99 to delete the 

script. 

Stringl A send string of up to 30 characters, in quotation marks. 

String! An expect string of up to 30 characters, in quotation marks. 

Each send string is sent from the PortMaster to the modem or remote host. When the 
expect string is matched against the input from the remote end, the next line in the 
send string is sent, and so on. When the last line in the script is finished, the 
PortMaster activates the data link protocol specified for this location. Therefore, the 
last entry in the Dial Command Script should be an expect string that indicates that the 
remote location is ready to begin receiving network packets. 

Note - Alternatively, you can set up automatic Location Table scripting. This method is 
much simpler to administer, and is preferred for setting up Location Table scripting, 
ee the commands set location telephone/' "set location username/' and "set location 
password starting on page 13-16—for information. 


Any printable ASCII character can be placed in the send or expect strings. In addition 
the following special characters are available: 


\r 

\0XX 

\\ 


ASCII carriage return. Send strings usually end with the "\r" 
character. Do not use "\r" in the send string for the V.25bis 
protocol. 

Replaced by the octal digit in the XX. 

Replaced by a single backslash. 


When you are connecting to a remote PortMaster, the final expect string to verify 
should be "SL/IP" for SLIP connections and "PPP" or (a tilde is always the first 
character of a PPP frame) for PPP connections. For other manufacturer's products, 
consult their manuals. 

The dial script can also be used to implement outbound PAP authentication. If you 
specify a PAP username and password in the last line of the dial script, the PortMaster 
can be authenticated by the remote end using PAP. This capability is shown in the final 
example below. 
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Examples 

Command> set location hq script 1 "atdtl8005551212\r" "CONNECT 
New script entry successfully added. 

Command> set location hq script 2 "\r" "ogin:" 

New script entry successfully added. 

Command> set location hq script 3 "my_login\r" "ssword:" 

New script entry successfully added. 

Command> set location hq script 4 "my_password\r" "PPP" 

New script entry successfully added. 

Command> set location denver v.25bis 1 "CRN7005552227" "=DCD= 

New script entry successfully added. 

Command> set location denver v.25bis 2 "=PAP=my-login/my-password" 

New script entry successfully added. 

See Also 

set location telephone - page 13-16 
set location username - page 13-17 
set location password - page 13-18 

Telephone Number 

Use the following command to set up a telephone number for automatic Location Table 
scripting for dialing to a remote location. 

set location Locname telephone String 

A location name that is in the Location Table. 

The telephone number to dial. Specify multiple numbers by 
separating them with ampersands (&). 

The maximum string length is 64 characters. 


Locname 

String 
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Usage 

Location Table scripting, which uses this command together with the "set location 
username and set location password" commands, provides a simple alternative to 
setting up a V.25bis or chat dial script. 

This is the preferred way to set up Location Table scripting when dialing to a remote 
location. ° 

Examples 

Command> set location denver telephone 13035551212&13035551313 
New telephone successfully set for location denver 

See Also 

set location script - page 13-14 
set location username - page 13-17 
set location password - page 13-18 


User Name 

Use the following command to set up a PAP username for automatic Location Table 
scripting for dialing to a remote location. 

set location Locname username Username 


Locname 

Username 


A location name that is in the Location Table. 

The PAP username to use when logging in to the remote 
location. The maximum name length is 64 characters. 


Usage 

Location Table scripting, which uses this command together with the "set location 
telephone" and "set location password" commands, provides a simple alternative to 
setting up a V.25bis or chat dial script. 


i™ S tion he Preferred W3y t0 SCt Up Location Table scripting when dialing 


to a remote 
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Example 

Command> set location denver username sanjose 
New username successfully set for location denver 

See Also 

set location script - page 13-14 
set location telephone - page 13-16 
set location password - page 13-18 

Password 

Use the following command to set up a password for automatic Location Table 
scripting for dialing to a remote location. 

set location Locname password Password 

Locname A location name that is in the Location Table. 

Password The PAP password associated with the username. 

Alternatively, this password can be used with CHAP if CHAP 
authentication is set "on" for the location; see page 13-20. The 
maximum password length is 64 characters. 

Usage 

Location Table scripting, which uses this command together with the "set location 
telephone" and "set location username" commands, provides a simple alternative to 
setting up a V.25bis or chat dial script. 

This is the preferred way to set up Location Table scripting when dialing to a remote 
location. 

Example 

Command> set location denver password excalcolaur 
New password successfully set for location denver 
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See Also 

set location script - page 13-14 
set location telephone - page 13-16 
set location username - page 13-17 
set location chap - page 13-20 


Voice 

This command, when set to "on," is used to force a data-over-voice call on an 
outbound ISDN connection. 

set location Locname voice on I off 


Locname 

on 

off 


A location name that is in the Location Table. 

Voice is required for an outbound data-over-voice ISDN 
connection. 

Voice is not required for an outbound data-over-voice ISDN 
connection. 


Usage 

Data over voice is supported for inbound and outbound ISDN connections. The 
PortMaster automatically accepts inbound voice calls and treats them as data calls. 

this command can be used to force a data-over-voice call for an outbound ISDN 
connection. 

Example 

Command> set location denver voice on 
denver voice dial changed from off to on 

See Also 

add location - page 13-5 
show location - page 13-4 
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CHAP 

This command is used for configuring outbound CHAP authentication. 

set location Locname chap on I off 

Locrtame A location name that is in the Location Table. 

on CHAP authentication is required for an outbound dial. 

0 ff CHAP authentication not supported for an outbound dial. This 

is the default. 

Usage 

The username and password entered in the Location Table are used as the system 
identifier" and "MD5 secret" in the CHAP authentication. Use of this feature ^ 
eliminates the need to use the "sysname" and User Table configurations for CHA , 
unless the device being dialed also dials into the PortMaster. 

See Also 

set chap - page 4-13 
set pap - page 4-12 
set location password - page 13-18 

High-Water Mark 

This command sets the number of bytes of queued network traffic required to open an 
additional dial-out line to the remote location. 

set location Locname high_water Number 

Locname A location name that is in the Location Table. 

Number A number between 0 and 65535 may be entered. The default is 0. 
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Location Table and DLCI Table 


Usage 

This value is only used when "maxports" is greater than 1 and network dial-out ports 
are available on the PortMaster. The PortMaster can quickly use all of the available 
ports for this location dial group if the "high-water" setting is too small. 


Generally, interactive terminal traffic has no more than a few hundred bytes queued at 
any one time, but file transfers (for example, FTP) queue several thousand bytes. 
Consider size differences when deciding the number to use for "high_water." 


Example 

Command> set location hq high_water 500 
hq high water level changed from 0 to 500 


See Also 

set location group - page 13-12 
set location maxports - page 13-25 

Idle Timeout 


This command sets the length of time the line 
the PortMaster disconnects the connection. 


can be idle—in both directions—before 


set location Locname idletime Number [minutes I seconds] 


Locname 

A location name that is in the Location Table. 

Number 

Timeout value from 0 to 240. The default value is 0. 

minutes 

Sets the idle time in minutes. This is the default. 

seconds 

Sets the idle time in seconds. 

Usage 



The idle timeout value is specified in minutes or seconds and 
to 240. It is for manual and on-demand locations. 


can be any value from 0 


If the idle timeout value is set to 0 or 1 minute, the idle timer is disabled. 
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Location Table and DLCI Table 


If the value is set in seconds or minutes to 2 or higher, the port is reset after having no 
traffic for the designated time. RIP packets are not counted as traffic. 

Example 

Command> set location hq idletime 30 
hq idle timeout changed from 0 to 30 minutes 

Input Filter 

This command sets a packet filter for packets entering the PortMaster from the 
interface this location establishes. 

set location Locname ifilter Filtername 

Locname A location name that is in the Location Table. 

Filtername Name of the input filter that is in the Filter Table. 

Usage 

When a filter is changed, any ports in use by the location must be reset to have the 
changes take effect. 

You remove the filter by entering the command without a filter name. 

Note - If a matching filter name is not in the Filter Table, this command is not effective 
and all traffic is permitted. 


Example 

Command> set location hq ifilter hq.in 
New input filter set for location hq 

See Also 

set location ofilter - page 13-23 
add filter - page 14-5 
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Output Filter 

This command sets a packet filter for packets exiting the PortMaster to the interface 
this location establishes. 


set location Locnatne ofilter Filtevnutnc 


Locname A location name that is in the Location Table. 

Filtername Name of the output filter that is in the Filter Table. 

Usage 

When a filter is changed, any ports in use by the location must be reset to have the 
change take effect. 

You remove the filter by entering the command without a filter name. 

Example 

Command> set location hq ofilter hq.out 
New output filter set for location hq 

See Also 


set location ifilter - page 13-22 
add filter - page 14-5 
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Multilink 

This command determines whether the PortMaster uses RFC 1717 Multilink PPP or 
Livingston multiline load-balancing for dial-out using multiple ports. 

set location Locname multilink on I off 

A location name that is in the Location Table. 

Use Multilink PPP as defined in RFC 1717. 

Use Livingston multiline load-balancing. This is the default. 

Usage 

When you set the location to use Multilink PPP, set the maximum number of network 
dial-out ports to the number of ports you wish to use. 

Example 

Command> set location hq multilink on 
hq multilink changed from off to on 

See Also 

set location high-water - page 13-20 
set location maxports - page 13-25 


Locname 

on 

off 
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Maxports 

This command sets the maximum number of network dial-out ports the PortMaster 
can use for this location. 

set location Locname maxports Number 


Locname 


A location name that is in the Location Table. 


Number 


A number between 0 and 60. The default is 0. 


Usage 

If 0 is selected, dialing to this location is disabled. If a number greater than 1 is 

selected, the PortMaster uses the value of "high.water" to decide when to dial out on 

, , t , 1I ? es If more * an one lme is open to the remote location, the PortMaster 

when C to S H he ^ T ™ 8 th . e ,! ines - If multi P le line s are open, idle time is used to decide 
when to disconnect unused lines. 


The maximum number of ports should be the last thing set for 
number is set to greater than zero, the location is available for 


a location. When 
use. 


the 


Example 


Command> set location hq maxports 4 
hq maximum port count changed from 0 to 4 


See Also 

set location high_water - page 13-20 
set location multilink - page 13-24 
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DLCI Table Configuration 



subinterfaces. 

Table 13-2 DLCI Table Commands 

Command Syntax __ 

show location Locname 

add did I ipdlci I ipxdlci Locname Did [Ipaddress I Ipxnetwork] 
delete did I ipdlci I ipxdlci Locname Did _ 


Show Location 

This command displays configuration information for a specified location. 


show location Locname 


Locname 


A location name that is in the Location Table. 


Example 


Command> show location subl 


Type: Sub-Interface 
Netmask: 255.255.255.0 
Options: Routing 


Location: subl 
IP Address: 192.168.3.1 
Protocol: Frame Relay 


Group: 1 

IP DLCI’s: DLCI Address 


Mtu: 1500 


16 0.0.0.0 
17 0.0.0.0 


See Also 

show SO - page 3-37 
show all - page 3-21 
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Add DLCI 



This command sets the Frame Relay subinterfaces for a specified location that has been 
configured to use Frame Relay service. 

add dlci I ipdlci I ipxdlci Locname Dlci [Ipaddress I Ipxnetwork] 


Note - "ipdlci" 

is a synonym for "dlci." 

ipdlci or dlci 

Use for IP networks. 

ipxdlci 

Use for IPX networks. 

Locname 

A location name that is in the Location Table. 

Dlci 

The DLCI number 

Ipaddress 

The optional IP address of the router attached to the 
permanent virtual circuit (PVC) represented by the DLCI. 

Ipxnetwork 

The optional IPX address of the network attached to the 
permanent virtual circuit (PVC) represented by the DLCI. 


Usage 

The PortMaster supports a feature called DLCI bundling to allow one synchronous 

donlTh* ""ttT 6 DLC /V° bC SpHt int ° tWO Frame Rela y subinterfaces 7 Splitting is 
done through the use of the Location Table and the DLCI Table. The port to which the 

Frame Relay is connected must be set for Frame Relay, and must be in the same dial 
group as the location. Each subinterface must have its own subnet or network number, 
efer to the Configuration Guide for PortMaster Products for more information. 

You can change values in the "add dlci" command by repeating the command with 
valued UCS ‘ Yt>U d ° n<>t neCd t0 ddete tHe eXiSting DLCI entrie * before hanging the 
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Example 

In this example, port SI is configured for Frame Relay and a new location subl is 
configured as a subinterface. Commands and responses are shown. 

Command> set si protocol frame 

Protocol for port SI changed from slip to frame.relay 

Command> set si group 1 

Group number for port SI changed from 0 to 1 

Command> add location subl 
Location subl successfully added 

Command> set location subl protocol frame 
subl protocol changed to frame.relay 

Command> set location subl group 1 
subl group number changed from 0 to 1 

Command> set location subl address 192.168.3.1 
subl destination changed from 0.0.0.0 to 192.168.3.1 

Command> set location subl netmask 255.255.255.0 
subl netmask changed from 0.0.0.0 to 255.255.255.0 

Command> set location subl routing on 

subl routing changed from off to on (broadcast,listen) 

Command> add dlci subl 16 
New dlci successfully added 

Command> add dlci subl 17 
New dlci successfully added 

Command> save all 
Saving global configuration 
Saving ports 

User table successfully saved 
Hosts table successfully saved 
Static route table successfully saved 
Location table successfully saved 
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SNMP table successfully saved 

Filter table successfully saved 

New configurations successfully saved. 

Command> reset si 
Resetting port SI 

See Also 

delete dlci - page 13-29 


Delete DLCI 


This command deletes entries from the DLCI Table, 
delete dlci I ipdlci I ipxdlci Locname Dlci 


dlci or ipdlci 

ipxdlci 

Locname 


Use for IP networks. 
Use for IPX networks. 


A specified location name that is in the Location Table. 
The DLCI number 


Usage 



can confirm the 


Example 

Command> delete dlci subl 16 
DLCI successfully deleted 
Command> delete dlci subl 17 
DLCI successfully deleted 

See Also 

add dlci - page 13-27 
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Filter Table 14 


L h ! S . Ch f ? er < j! S f . i 1 be f how to use the Command Line Interface to create, edit, and 
delete filters. Detailed command definitions follow a command summary table. 

A dmi r iStrat ° rS , Can USC the Command Line Interface to create appropriate 
packet filters to control access to specific hosts, networks and network services. 

Once a filter is defined, it can be used with the "ptrace" command, or attached to an 

Ethernet interface, network hardwired port, user, or location. Filters for network 

ardwired ports and Ethernet interfaces are set for the port or interface. Filters for dial- 

}™f erS arC Set . m th ® ^ Ser Table ' or can be referenced by RADIUS. Filters for dial-out 
locations are set in the Location Table. 

rj'Sf abOU * desi « nin « P“ ckel to the Configuration Guide for 


Displaying Filter Data 


To display information about your filters, use the following filter-specific commands: 

• show table filter - see page 14-4 

• show filter - see page 14-4 

• ifconfig - see page 3-5 

Creating, Editing, and Deleting Filters 

To create, edit, or delete a filter: 


1 . 


At the command line, create a new filter using the "add filter" 
following example: 


command. 


as in the 


Command> add filter internet.in 
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2. At the command line, define a new (or edit an existing) filter using the "set filter" 
command, as in these examples: 

Command> set filter Filtername RuleNutnber Action 
Command> set ipxfilter Filtername RuleNumber Action 
Command> set sapfilter Filtername RuleNumber Action 

Filtername is the name of a filter, RuleNumber is the number of the filter rule (1 or 
higher), and Action is the filter definition. 

As vou press [Enter] following each command, the PortMaster responds by 
echoing the configuration change you have made. For example: 


Command> add filter si.in 
New Filter successfully added 


Command> set filter si.in 1 permit tcp estab 
Filter si .in updated 


Note - Filter names have a maximum of 12 characters. If longer names are used, they 


are truncated to 12 characters. 


3. When you 
command i 

PortMaster, as follows: 



Command> save filter 


save all" can also be used. 
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Summary of Filter Table Commands 

The commands in Table 14-1 configure the Filter Table. Filters can be applied to 
Ethernet interfaces, users, locations, or network hardwired ports, and can be used for 
debugging with the "ptrace" command. 

Note - The commands should be entered on one line, without any breaks Line breaks 
shown here are due to the limited space available. 

Table 14-1 Filter Table Configuration 



Command Syntax 


show table filter 

show filter Filtername 
save filter 

add filter Filtername 
delete filter Filtername 

set filter Filtername RuleNumber permit I deny [Ipaddress/NM Ipaddress(dest)/NM ] [log] 

set filter Filtername RuleNumber permit I deny [Ipaddress/NM lpaddress(dest)/NM] 
tcp [src eq I It I gt Tport] [dst eq I It I gt Tport] [established] [log] 

set filter Filtername RuleNumber permit I deny [Ipaddress/NM Ipaddress(dest)/NM] 
udp [src eq I It I gt Uport] [dst eq I It I gt Uport] [log] ' 

UpltJ™STnog]''' N " mferPermit ' deny l, ’’ a ‘ Ure$s/NM W^ssMsD/NM] 

set ipxfilter Filtername RuleNumber permit I deny [srcnet Ipxnetwork] 
srchost lpxaddress] [srcsocket eq I gt I It Ipxsock] [dstnet Ipxnetwork] 

[dsthost lpxaddress] [dstsocket eq I gt I It Ipxsock] 

set sapfilter Filtername RuleNumber permit I deny [server String ] [network Ipxnetwork 1 
[host lpxaddress] [socket eg I gt I It Ipxsock] ipxnetworK] 


Summary of Filter Table Commands 
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Description of Filter Commands 

The following commands create, delete, and modify filters. 

Show Table Filter 

This command shows a list of the filters in the Filter Table. 

show table filter 

Example 

Command> show table filter 

intemet.in etherO.in check-in pingtr.in 

intemet.out ether.out 

See Also 

show filter - page 14-4 

Show Filter 

This command shows the configuration of a specified filter, 

show filter Filtername 

Filtername Name of a filter that is in the Filter Table. 

Example 

Command> show filter intemet.in 

1 deny 192.168.200.0/24 0.0.0.0/0 ip 

2 permit 0.0.0.0/0 0.0.0.0/0 tcp estab 

3 permit 0.0.0.0/0 0.0.0.0/0 udp dst eq 53 

4 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 53 

5 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 25 

6 permit 0.0.0.0/0 0.0.0.0/0 icmp 

See Also 

show table filter - page 14-4 


Command Line Administrator’s Guide—November 1996 

14-4 





Save Filter 

p£iS” and any Cha " 8eS ‘ n ' he FU,er Table 10 the nonvola «>« memory of the 
save filter 

Usage 

save all" can also be used. 

Example 

Command> save filter 

Filter table successfully saved 

New configurations successfully saved. 

Add Filter 

This command creates a new filter name and adds it to the Filter Table, 
add filter Filtemame 


Filtername 


Name for a filter, up to 12 characters long 


Usage 


,0 be RADIUS, it must end in ".in” if i, , s an input aiter and 

outout filler put ,?**". y sl "8 ,he same conv ention to distinguish input and 
output filters is an excellent idea for any filter. 


Example 

Command> add filter si.in 
New Filter successfully added 
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Delete Filter 

This command deletes an existing filter from the Filter Table. 


delete filter Filtername 

Filtername Name of a filter in the Filter Table 


Usage 

Use caution when removing filters from the Filter Table. Make sure that they are no 
longer needed for any packet filtering. 

Example 


Command> delete filter si.in 


There is no automatic response to this command, but using the command "show table 
filter" will confirm that the filter has been removed from the Filter Table. 


See Also 

add filter - page 14-5 
show table filter- page 14-4 

IP Filter 

This command is used to configure a filter that controls passage of a packet through an 
interface. 

set filter Filtername RuleNumber permit I deny [Ipaddress/NM Ipaddress(dest)/NM] [log] 


Filtername 

RuleNumber 

permit 

deny 


Name of an existing filter that is in the Filter Table. 

A filter rule number. 

Permits a packet that matches the filter to pass through the 
interface. 

Stops a packet that matches the filter from passing through the 
interface. 
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Ipaddress 


Specifies the comparison with the source IP address of the 
packet. 

The netmask that indicates the number of high-order bits of 
the source or destination IP address of the packet that must 
match an address in the filter. Any value between 0 and 32 
inclusive, preceded by a slash (/), can be used; common mask 
values are 


Ipaddress(dest) 


/0 - To match all packets with any address. 

/16 - Looks at high-order 16 bits of the address. 

/24 - Looks at high-order 24 bits of the address. 

/32 - Looks at the entire IP address. 

Specifies the comparison with the destination IP address of the 
packet. 


log 

Usage 


Packets matching the rule are logged by syslog to the loghost. 


I 0 en C a 0 d n dt UCt W firStCreatin S the filter usi "g th e command "add filter," and 

can ,md d f 8 ^ ^ ° r den y P ackets that match the criteria in the rules You 

can update an existing filter by setting additional rules with new rule numbers and 

o22 er ru C ." tena 'K 0r r Can 6dit ^ eXiStin * rul6S - Y ° U ca " d ^* a ^eTy Specifying 

ull T h f 7 number for example "set filter sO.in 4". You cannot use the Command 8 
PMconsole aCe 3 ^ betW6en ° ther mleS ' aIthou § h Y ou can do so with 


Zerodength filters applied to Ethernet interfaces are treated as permit filters That is if 

at f U PermitS CVer y thin S throu gL- If a filter has one or mom 
rules, anything not explicitly permitted by a rule is denied at the end of the filter. 

Example 


Command> set filter wl.in 1 deny 192.168.1.0/24 0.0.0 0/0 loe 
Filter wl.in updated 6 

See Also 

add filter - page 14-5 
set loghost - page 4-5 
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TCP Filter 

This command is used to set filtering rules for TCP packets. 

set filter Filtername RuleNumber permit I deny 
[Ipaddress/NM Ipaddress(dest)/NM] tcp [src eq I It I gt Tport] 
[dst eq I It I gt Tport] [established] [log] 


Filtername 

Name of an existing filter that is in the Filter Table. 

RuleNumber 

A filter rule number. 

permit 

Permits a packet that matches the filter to pass through the 
interface. 

deny 

Stops a packet that matches the filter from passing through the 
interface. 

Ipaddress 

Specifies the comparison with the source IP address of the 
packet. 

NM 

The netmask that indicates the number of high-order bits of 
the source or destination IP address of the packet that must 
match an address in the filter. Any value between 0 and 32 
inclusive, preceded by a slash (/), can be used; common mask 
values are 

/O - To match all packets with any address. 

/16 - Looks at high-order 16 bits of the address. 

/24 - Looks at high-order 24 bits of the address. 

/32 - Looks at the entire IP address. 

Ipaddress(dest) 

Specifies the comparison with the destination IP address of the 
packet. 

src 

Specifies that the packet source port number be tested; see 
"Usage" for test criteria. 

eq. It, or gt 

Mode of comparison of port numbers; equal (eq), less than (It), 
or greater than (gt). 

Tport 

The designated TCP port. 
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dst 


established 


log 


Specifies that the packet destination port number be tested; see 
"Usage" for test criteria. 

Determine if the connection is for an established TCP network 
connection. Packets being sent to establish new TCP 
connections do not match this rule. 

Packets matching the rule are logged by syslog to the loghost. 


Note This command should be entered on one line, without 
breaks shown here are due to the limited space available. 


any breaks. The line 


Usage 


The filtering rules are based on source and destination 
established state of a connection. 


port numbers, and the 


I h p e n ° r r , d p er ° f ™Jf S in a filter u is im Portant because the PortMaster evaluates the rules in 

PrJ t ( 7 T numbered - Refer to the Configuration Guide for PortMaster 

Products for more information. 


When using "src" or "dst," specify the comparison to be made, as follows: 

[src I dst eq] Test the source or destination port number in the packet to 

equal the port number. 


[src I dst gt] 
[src I dst It] 


Test the source or destination port number in the packet to be 
greater than the port number. 

Test the source or destination port number in the packet to be 
less than the port number. 


Examples 

Command> set filter wl.in 1 deny 192.168.1.0/24 0.0.0 0 /0 loe 
Filter wl.in updated 6 

Command> set filter wl.in 2 permit tcp estab 
Filter wl.in updated 


Description of Filter Commands 


14-9 








Command> set filter wl.in 3 permit tcp dst eq 80 
Filter wl.in updated 

Command> set filter wl.in 4 permit tcp dst eq 25 
Filter wl.in updated 

At any point, you can see the updates made to the Alter by using the following command 
(shown with response): 

Command> show filter wl.in 

1 deny 192.168.1.0/24 0.0.0.0/0 ip log 

2 permit 0.0.0.0/0 0.0.0.0/0 tcp estab 

3 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 80 

4 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 25 

See Also 

add filter - page 14-5 
set loghost - page 4-5 


UDP Filter 


This command is used to set filtering rules for User Datagram Protocol (UDP) packets. 
The filtering rules are very similar to those used for TCP packets, except t a ere is 
no "established" keyword for UDP. 


set filter Filtername RuleNumber permit I deny 
[Ipaddress/NM Ipaddress(dest)/NM] udp [src eq I It I gt Uport] 
[dst eq I It I gt Uport ] [log] 


Filtername 

RuleNumber 

permit 

deny 

Ipaddress 


Name of an existing filter that is in the Filter Table. 

A filter rule number. 

Permits a packet that matches the filter to pass through the 
interface. 

Stops a packet that matches the filter from passing through the 
interface. 

Specifies the comparison with the source IP address of the 
packet. 
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Filter Table 


NM 

The netmask that indicates the number of high-order bits of 
the source or destination IP address of the packet that must 
match an address in the filter. Any value between 0 and 32 
inclusive, preceded by a slash (/), can be used; common mask 
values are 


/0 - To match all packets with any address. 

/16 - Looks at high-order 16 bits of the address. 

/24 - Looks at high-order 24 bits of the address. 

/32 - Looks at the entire IP address. 

Ipaddress(dest) 

Specifies the comparison with the destination IP address of the 
packet. 

src 

Specifies that the packet source port number be tested; see 
"Usage" for test criteria. 

eq. It, or gt 

Mode of comparison of port numbers; equal (eq), less than (It), 
or greater than (gt). 

Uport 

The designated UDP port. 

dst 

Specifies that the packet destination UDP port number be 
tested; see "Usage" for test criteria. 

log 

Packets matching the rule are logged by syslog to the loghost. 


A Note - This command should be entered on one line, without any breaks. The line 
breaks shown here are due to the limited space available. 


Usage 

The order of rules in a filter is important because the PortMaster evaluates the rules in 
the order that they are numbered. Refer to the Configuration Guide for PortMaster 
Products for more information. 
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Filter Table 


When using "src" 

or "dst," specify the comparison to be made, as follows: 

[src 1 dst eq] 

Test the source or destination port number in the packet to 
equal the port number. 

[src 1 dst gt] 

Test the source or destination port number in the packet to be 
greater than the port number. 

[src 1 dst It] 

Test the source or destination port number in the packet to be 
less than the port number. 

Examples 


Command> set filter wl.in 5 permit udp src eq 53 

Filter wl.in updated 

Command> set filter wl.in 6 permit udp dst eq 53 

Filter wl.in updated 

See Also 


add filter - page 14-5 
set loghost - page 4-5 


ICMP Filter 

The filter command can be used to add the configuration information to filter a packet 
by type of ICMP message. 


set filter Filtername RuleNumber permit I deny 
[Ipaddress/NM Ipaddress(dest)/NM] icmp [type ltype ] [log] 


Filtername Name of an existing filter that is in the Filter Table. 


RuleNumber 

permit 


deny 


A filter rule number. 

Permits a packet that matches the filter to pass through the 
interface. 

Stops a packet that matches the filter from passing through the 
interface. 
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Filter Table 


Ipaddress Specifies the comparison with the source IP address of the 

packet. 

The netmask that indicates the number of high-order bits of 
the source or destination IP address of the packet that must 
match an address in the filter. Any value between 0 and 32 
inclusive, preceded by a slash (/), can be used; common mask 
values are 

/0 - To match all packets with any address. 

/16 - Looks at high-order 16 bits of the address. 

/24 - Looks at high-order 24 bits of the address. 

/32 - Looks at the entire IP address. 

Ipaddress(dest) Specifies the comparison with the destination IP address of the 
packet. 

U yP e T yP e to compare against the type contained in the packet. 

Refer to RFC 1700 for a list of ICMP packet types. 

1°8 Packets matching the rule are logged by syslog to the loghost. 

A Note - This command should be entered on one line, without any breaks. The line 
breaks shown here are due to the limited space available. 

Examples 

Command> set filter wl.in 1 permit icmp 
Filter wl.in updated 

See Also 

add filter - page 14-5 
set loghost - page 4-5 
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Filter Table 


IPX Filter 

This command is used to set filtering rules for IPX packets. 

set ipxfilter Filtername RuleNumber permit I deny 

[srcnet Ipxnetwork 1 [srchost Ipxaddress ] [srcsocket eq I gt I It Ipxsock] 

[dstnet Ipxnetwork] [dsthost Ipxaddress ] [dstsocket eq I gt I It Ipxsock] 


Filtername 

RuleNumber 

permit 

deny 

srcnet 

Ipxnetwork 

srchost 

Ipxaddress 

srcsocket 


eq. It, or gt 
Ipxsock 


Name of an existing filter that is in the Filter Table. 

A filter rule number. 

Permits a packet that matches the filter to pass through the 
interface. 

Stops a packet that matches the filter from passing through the 
interface. 

Specifies the comparison with the source IPX network number 
contained in the packet. 

The IPX network number in hexadecimal format. 

Specifies the comparison with the source IPX node address 
contained in the packet. 

The IPX address in hexadecimal format. 

Specifies that the source IPX socket number contained in the 
packet must be compared with the IPX socket number 
specified in the filter. A second keyword—eq, It, or gt—must 
be used to indicate the mode of comparison. 

Mode of comparison of socket numbers; equal (eq), less than 
(It), or greater than (gt). 

A socket number specified for the comparison, a hexadecimal 
value between 0x0000 and Oxffff. 
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dstnet 

Specifies the comparison with the destination IPX network 
number contained in the packet. 

dsthost 

Specifies the comparison with the destination IPX node 
address contained in the packet. 

dstsocket 

Specifies that the destination IPX socket number contained in 
the packet must be compared with the IPX socket number 
specified in the filter. A second keyword—eq. It, or gt—must 
be used to indicate the mode of comparison. 


A Note This command should be entered on one line, without any breaks. The line 
breaks shown here are due to the limited space available. 


Usage 

The filtering rules are based on source or destination host, network, or socket. 

When using srcsocket" or "dstsocket" specify the comparison to be made, as follows: 

ec l Test the source or destination socket number in the packet to 

equal the value. 

St Test the source or destination socket number in the packet to 

be greater than the value. 

14 Test the source or destination socket number in the packet to 

be less than the value. 

Examples 

Command> set ipxfilter eO.in 1 permit dstnet C009C901 
Filter eO.in updated 

Command> set ipxfilter eO.in 2 permit srcnet C009C905 
Filter eO.in updated 

Command> set ipxfilter eO.in 3 permit srchost A0B1C2D3E4F5 
Filter eO.in updated 

Command> set ipxfilter eO.in 4 permit dsthost A1B2C3D4E5F6 
Filter v.in updated 
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Command> set ipxfilter eO.in 5 deny dstsocket eq 451 
Filter eO.in updated 

Command> set ipxfilter eO.in 6 permit srcsocket gt 455 
Filter eO.in updated 

Command> show ipxfilter eO.in 
- IPX Rules - 

1 permit dstnet C009C901 

2 permit srcnet C009C905 

3 permit srchost A0B1C2D3E4F5 

4 permit dsthost A1B2C3D4E5F6 

5 deny dstsocket eq 0451 

6 permit srcsocket gt 0455 

See Also 

add filter - page 14-5 


SAP Filter 

This command is used to set filtering rules for IPX SAP packets. 


set sapfilter Filtername RuleNumber permit I deny [server String] 
[network Ipxnetwork] [host Ipxaddress] [socket eg I gt I It Ipxsock ] 

Filtername Name of an existing filter that is in the Filter Table. 


RuleNumber 

permit 

deny 

server 

String 


A filter rule number. 

Permits a packet that matches the filter to pass through the 
interface. 

Stops a packet that matches the filter from passing through the 
interface. 

Specifies the comparison with the name of the server which is 
advertising its service. 

SAP server name. 
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Filter Table 



network 


Specifies the comparison with the server's IPX network 
number. 


Ipxnetwork The IPX network number specified in hexadecimal format. 


host 

Ipxaddress 

socket 


eq. It, or gt 
Ipxsock 


Specifies the comparison with the server's IPX node address. 

The IPX node address in hexadecimal format. 

Specifies that the server's IPX socket number must be 
compared with the IPX socket number specified in the filter. A 
second keyword—eq. It, or gt—must be used to indicate the 
mode of comparison. 

Mode of comparison of socket numbers; equal (eq), less than 
(It), or greater than (gt). 

The socket number, a hexadecimal value between 0x0000 and 
Oxffff. 


Note - This command should be entered on one line, without any breaks. The line 
breaks shown here are due to the limited space available. 


Usage 

The filtering rules are based on server, network, host, or socket. SAP packets can only 
be filtered on output, not on input. 

When using "socket," specify the comparison to be made, as follows: 


ec I Test the socket number in the packet to equal the specified 

value. 

& Test the socket number in the packet to be greater than the 

specified value. 

14 Test the socket number in the packet to be less than the 

specified value. 
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Example 

Command> set sapfilter eO.out 1 permit network C009C901 
Filter eO.out updated 

Command> set sapfilter eO.out 2 permit host A0B1C2D3E4F5 
Filter eO.out updated 

Command> set sapfilter eO.out 3 deny socket eq 452 
Filter eO.out updated 

Command> show sapfilter eO.out 

1 permit network C009C901 

2 permit host A0B1C2D3E4F5 

3 deny socket eq 0452 

See Also 

add filter - page 14-5 
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Static Route Table and Host Table 15 


This chapter describes how to configure the Static Route Table and Host Table in the 
nonvolatile memory of the PortMaster. 

Displaying Settings 


To display information about these tables, use the following commands: 

• show routes - see page 15-3 

• show ipxroutes - see page 15-6 

• show table host - see page 15-10 

For information about these commands, refer to "Description of Static Route Table 
Commands," on page 15-3, and "Description of Host Table Commands," on page 15-10. 

Configuring the Static Route Table and Host Table 

To configure the tables: 

1. At the command line, enter your information as in this example: 

Command> add route 192.168.7.0 192.168.7.1 1 

Command> add ipxroute C009C901 00000002:A0B1C2D3E4F5 2 4 

Command> add host 192.168.206.2 bach 

As you press [Enter] following each command, the PortMaster responds bv 
echoing the change you have made. For example: 


Command> delete route 192.168.7.0 192.168.7.1 
Route successfully deleted 


Displaying Settings 
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2. When you finish configuring the tables, enter the "save route" or save host 
command to write your configuration changes to the nonvolatile memory of the 
PortMaster, as follows: 

Command> save route 
Command> save host 

"save all" can also be used. 

Summary of Static Route Table Commands 

The Static Route Table commands in Table 15-1 are used to configure the Static Route 
Table. 

Table 15-1 Static Route Table Commands 

Comman d Syntax ------ 

show routes 
save route 

add route Ipaddress Ipaddress(gzv) Metric 
delete route Ipaddress Ipaddress(gw) 
show ipxroutes 

add ipxroute Ipxnetwork Ipxaddress Metric Ticks 

delete ipxrout e Ipxnetwork Ipxaddress ____ 

Note - For information on setting the IP default gateway, see page 4-8. 
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Description of Static Route Table Commands 


Static routes are used to provide routing information instead of or in addition to that 
provided by RIP. The static routes are stored in the PortMaster Static Route Table. 


Show Routes 

This command displays the PortMaster IP routes. 


show routes 

Usage 

Note that IP routes and IPX routes are displayed separately. 

The fields shown in the example are defined as follows. ComOS 3.5 also displays a 
column for the prefix length of the destination and source of the route. 

Destination Destination IP address 

Gateway Gateway IP address 


Flag 


Met 

Interface 


H - A host route 
N - A network or subnet route 
S - A static route 

L - A route to a directly attached network or host 
D - A dynamic route 

C - A route that has been recently changed 
O - An obsolete route, scheduled for deletion 

Metric hop count to the remote destination 

The interface to the IP network 


Description of Static Route Table Commands 
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Example 


Command> show routes 
Destination Gateway 


Flag Met Interface 


0.0.0.0 


192.168.128.0 

192.168.96.0 

192.168.1.0 

192.168.1.0 

192.168.2.0 

192.168.131.0 

192.168.3.0 


192.168.96.2 

192.168.96.2 

192.168.96.6 

192.168.96.31 

192.168.96.2 

192.168.96.2 

192.168.96.2 

192.168.96.2 


NS 1 etherO 

ND 3 etherO 

NL 1 etherO 

ND 2 etherO 

ND 2 etherO 

ND 3 etherO 

ND 4 etherO 

ND 3 etherO 


Save Route 

This command writes the current PortMaster Static Route Table to the nonvolatile 


memory of the PortMaster. 
save route 

Usage 

"save all" can also be used. 

Example 

Command> save route 

Static route table successfully saved 

New configurations successfully saved. 
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Add Route 



This command adds a static route to the PortMaster IP Static Route Table, 
willbe affected 13 " t0 ““ 3 St3tk netmask ' add U before settin 8 an 7 static routes that 


add route Ipaddress Ipaddress(gw) Metric 

Ipaddress The host or network IP address 

Ipaddress(gw) Gateway IP address 

Metric Hop count to the remote destination 


Usage 

The destination is the host or network IP address for which the PortMaster is routine. 
The gateway is the address of a router where packets should be sent for forwarding to 
the destination. The gateway should never be set to any address on the PortMaster 


Example 

Command> add route 192.168.7.0 192.168.7.1 1 
New route entry successfully added 

See Also 

add netmask - page 4-25 
delete route - page 15-6 
add route - page 11-16 


Description of Static Route Table Commands 
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Delete Route 

This command deletes a static route from the PortMaster IP Static Route Table. 

delete route Ipaddress Ipaddress(gw) 

Ipaddress Destination IP address 

Ipaddress(gw) Gateway IP address 

Usage 

Only static routes can be deleted. 

Examples 

Command> delete route 192.168.7.0 192.168.7.1 
Route successfully deleted 

See Also 

add route - page 15-5 

Show IPX Routes 

This command displays the PortMaster IPX routes, 
show ipxroutes 

Usage 

Note that the IP routes and the IPX routes are displayed separately. 

The fields shown in the example are defined as follows: 

Network Destination IPX network. 

Gateway Gateway IPX address. 
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Flag 


H - A host route 


N - A network or subnet route 
S - A static route 

L - A route to a directly attached network or host 
D - A dynamic route 

C - A route that has been recently changed 
O - An obsolete route, scheduled for deletion 

Metric hop count to the remote destination. 

The time it takes to send the packet to the destination network 
in 50-ms increments. 


Interface 


The interface to the IPX network. 


Example 

Command> show ipxroutes 
Network Gateway 


Flag Met Ticks Interface 


0000000F 0000000F:00C005010620 NL 1 


Add IPX Route 

This command adds a static route to the PortMaster IPX Route Table. 


add ipxroute Ipxnetwork Ipxaddress Metric Ticks 


Ipxnetwork Destination IPX network number. 

Ipxaddress Gateway IPX address in the following format: network number 


and node address separated by a colon (:). 

Hop count to the remote destination. 

The time it takes to send the packet to the destination network 
in 50-ms increments. 


Description of Static Route Table Commands 
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Usage 

The destination is the IPX network for which the PortMaster is routing. The gateway is 
the address of a router where packets are sent for forwarding to the destination. The 
gateway should never be set to the PortMaster address. 


Example 

Command> add ipxroute C009C901 00000002:A0B1C2D3E4F5 2 4 
New route successfully added 

See Also 

delete ipxroute - page 15-8 


Delete IPX Route 

This command deletes a static route from the PortMaster IPX Route Table, 

delete ipxroute Ipxnetwork Ipxaddress 


Ipxnetwork 

Ipxaddress 


Destination IPX network number. 

Gateway IPX address in the following format: network number 
and node address separated by a colon (:). 


Usage 

Only static routes can be deleted. 

Example 

Command> delete ipxroute C009C901 00000002:A0B1C2D3E4F5 
Route successfully deleted 

See Also 

add ipxroute - page 15-7 
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Configuring the Host Table 

Each ^ attached to an IP ne twork has a unique IP address. The PortMaster supports 
a local Host Table to map host names to IP addresses. Host names are for the 
convenience of the administrator who uses the Command Line Interface, and to record 
host names entered by users at the host prompt. To avoid confusion and reduce 
administrative overhead, Livingston recommends using Domain Name Service (DNS) 

or Network Information Service (NIS) for host name resolution rather than using the 
local Host Table. ° 

^formation on setting the NIS or DNS server and domain, refer to Chapter 4 
Global Configuration." 

Summary of Host Table Commands 

The host table commands in Table 15-2 are used to configure the Host Table. 

Table 15-2 Host Table Commands 

Command Syntax 
show table host 
save host 

add host Ipaddress String 
delete host Ipaddress I String 

Note - The PortMaster always checks the local Host Table before using DNS or NIS. 



Configuring the Host Table 
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Description of Host Table Commands 

These commands are used to maintain the PortMaster Host Table. 


Show Table Host 

This command displays the Host Table from the PortMaster. 

show table host 

Example 

Command> show table host 
192.168.200.4 chopin 

172.16.200.3 elgar 

Save Host 

This command writes the current Host Table to the nonvolatile memory of the 
PortMaster. 

save host 

Usage 

The command may also be entered as "save hosts"; "save all" can also be used. 


Example 

Command> save host 

Hosts table successfully saved 

New configurations successfully saved. 
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Add Host 

This command adds a host to the Host Table, 
add host Ipaddress String 


Ipaddress 

IP address of the host 

String 

A string of printable characters representing the host name 

Example 



Command> add host 192.168.200.4 chopin 
New host entry successfully added 

Delete Host 

This command deletes a host from the Host Table, 
delete host Ipaddress I String 


Ipaddress 

IP address of the host 

String 

The host name 


Examples 

Command> delete host chopin 
Host entry successfully deleted 

Description of Host Table Commands 
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Command Index 


A 

add did 13-27 
add filter 14-5 
add host 15-11 
add ipxdld 13-27 
add ipxroute 15-7 
add location 13-5 
add modem 6-42 
addnetmask 4-25 
add netuser 12-6 
add ospf area 11-12 
add route 

OSPF 11-16 
Static Route Table 15-5 
add snmphost any 4-30 
add snmphost none 4-30 
add snmphost reader 4-30 
add snmphost writer 4-30 
add user 12-6 

D 

delete dlci 13-29 
delete filter 14-6 
delete host 15-11 
delete ipxdlci 13-29 
delete ipxroute 15-8 
delete location 13-6 
delete modem 6-43 
delete netmask 4-26 
delete ospf area 11-13 


delete route 15-6 

delete snmphost reader 4-31 

delete snmphost writer 4-31 

delete user 12-7 

dial 3-7 

done 3-4 

E 

erase all-flash 3-14 
erase comos 3-14 
erase configuration 3-14 
erase file 3-14 
erase partition 3-14 
exit 3-4 

H 

help 3-4 

I 

ifconfig 3-5 
OSPF 11-9 

P 

ping 3-8 
pmlogin 3-10 
ptrace 3-9 

Q 

quit 3-4 
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R 

reboot 3-3 
reset all 3-19 
reset console 3-19 
reset dialer 3-19 
reset Handle 3-19 
reset PO 3-19 
reset SO 3-19 
reset W1 3-19 
rlogin 3-11 

set debug 3-12 
set debug ospf 11-24 
set default broadcast 4-9 
set default listen 4-9 
set default on 4-9 
set domain 4-7 
set EtherO address 5-3 
set EtherO broadcast 5-4 
set EtherO ifilter 5-9 
set EtherO ip 5-8 
set EtherO ipx 5-8 

s 

save all 3-18 

save console 3-17 

save EtherO 3-17 

save filter 3-17, 14-5 

save global 3-17 

save host 3-17, 15-10 

save location 3-17, 13-5 

save netmask 3-17, 4-24 

save ospf 11-10 

save PO 3-17 

save route 3-17, 15-4 

save SO 3-17 

save snmp 3-17, 4-29 

save user 3-17, 12-5 

save W1 3-17 

set accounting 4-20 

set alternate_auth_server 4-19 

set assigned_address 4-10 

set authentication__server 4-18 

set chap 4-13 

setchoicenet 4-21 

set choicenet-secret 4-22 

set console 3-15 

set EtherO ipxframe 5-7 

set EtherO ipxnet 5-6 

set EtherO netmask 5-4 

set EtherO ofilter 5-10 

set EtherO ospf 11-21 

set EtherO ospf accept-rip 11-20 

set EtherO routing 5-5 

set filter (ICMP) 14-12 

set filter (IP) 14-6 

set filter (TCP) 14-8 

set filter (UDP) 14-10 

set gateway 4-8 

set host 4-5 

set ipx 4-13 

set ipxfilter 14-14 

set isdn-switch 4-16, 9-4, 10-5 

set LineO el 10-4 

set LineO encoding 10-7 

set LineO fractional 10-4 

set LineO framing 10-6 

set LineO group 10-9 

set LineO group channels 10-8 

set LineO isdn 10-4 

set LineO pcm 10-7 

set LineO tl 10-4 
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set location chap 13-20 

set location compression 13-13 

set location continuous 13-7 

set location destination 13-9 

set location group 13-12 

set location high_water 13-20 

set location idletime 13-21 

set location ifilter 13-22 

set location ipxnet 13-10 

set location manual 13-7 

set location map 13-12 

set location maxports 13-25 

set location mtu 13-14 

set location multilink 13-24 

set location netmask 13-9 

set location ofilter 13-23 

set location on_demand 13-7 

set location ospf 11-23 

set location password 13-18 

set location protocol 13-8 

set location routing broadcast 13-11 

set location routing listen 13-11 

set location routing on 13-11 

set location script 13-14 

set location telephone 13-16 

set location username 13-17 

set location voice 13-19 

setloghost 4-5 

set MO 10-9 

set maximum pmconsole 4-14 

set nameserver 4-7 

setnamesvc 4-6 

setnetbios 4-11 

set ospf area external 11-14 

set ospf area md5 11-18 

set ospf area password 11-17 


set ospf area range 11-13 

set ospf area stub-default-cost 11-15 

set ospf disable 11-11 

set ospf enable 11-11 

set ospf priority 11-11 

set ospf router-id 11-19 

set pO device 8-3 

set pO disabled 8-4 

set pO disconnect 8-6 

set pO extended 8-3 

set pO host 8-5 

set pO service_device 8-4 

set pap 4-12 

set password 4-3 

set reported_ip 4-11 

set SO access 6-30 

set SO address 6-34 

set SO autolog 6-24 

set SO cd 6-18 

set SO compression 6-38 

set SO databits 6-13 

set SO destination 6-35 

set SO device 6-8 

set SO device network dialin 6-8 

set SO device network dialout 6-8 

set SO device network twoway 6-8 

set SO dialback_delay 6-25 

set SO directory 10-10 

set SO dtr_idle 6-26 

set SO extended 6-6 

set SO group 6-20 

set SO hangup 6-24 

set SO host default 6-29 

set SO host Ipaddress 6-29 

set SO host prompt 6-29 

set SO idletime 6-20 
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set SO ifilter 6-31 
setSOipxnet 6-37 
set SO login 6-6 

set SO login network dialin 6-6 

set SO login network dialout 6-6 

set SO login network twoway 6-6 

set SO map 6-39 

set SO message 6-22 

set SO modem 6-18 

set SO mtu 6-36 

setSOnetmask 6-34 

set SO network dialin 6-10 

set SO network dialout 6-10 

set SO network hardwired 6-11 

set SO network twoway 6-10 

set SO ofilter 6-32 

set SO ospf 11-22 

set SO override 6-17 

set SO parity 6-12 

set SO prompt 6-23 

set SO protocol 6-33 

set SO routing broadcast 6-37 

set SO routing listen 6-37 

set SO routing on 6-37 

setSOrts/cts 6-16 

set SO security 6-21 

set SO service_device netdata 6-28 

set SO service_device portmaster 6-28 

set SO service_device rlogin 6-28 

set SO service_device telnet 6-28 

set SO service_login netdata 6-27 

set SO service_login portmaster 6-27 

set SO service_login rlogin 6-27 

set SO service_login telnet 6-27 

set SO speed 6-11 

set SO stopbits 6-14 

set SO termtype 6-30 

set SO twoway 6-9 

set SO twoway network dialin 6-9 

set SO twoway network dialout 6-9 

set SO twoway network twoway 6-9 

set SO username 6-24 

set SO xon/xoff 6-15 

set S10 directory 9-7 

set S10 dn 9-7 

set S10 spid 9-6 

set sapfilter 14-16 

set secret 4-19 

set serial-admin 4-15 

set snmp on 4-28 

set snmp readcommunity 4-29 

set snmp writecommunity 4-29 

set sysname 3-20 

set telnet 4-4 

set user compression 12-16 

set user destination 12-12 

set user dialback 12-8 

set user host 12-9 

set user idle 12-22 

set user ifilter 12-17 

set user ipxnet 12-14 

set user local-ip-address 12-13 

set user map 12-20 

set user maxports 12-21 

set user mtu 12-19 

set user netmask 12-14 

set user ofilter 12-18 

set user password 12-8 

set user protocol 12-11 

set user routing 12-15 

set user service 12-10 

set user session-limit 12-23 
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set W1 address 7-6 

set W1 annex-d 7-13 

set W1 destination 7-7 

set W1 did 7-13 

set W1 extended 7-4 

set W1 group 7-14 

set W1 hangup 7-15 

set W1 idletime 7-16 

set W1 ifilter 7-9 

setWlipxnet 7-8 

setWllmi 7-12 

set W1 modem 7-17 

setWlmtu 7-11 

set W1 netmask 7-7 

set W1 network dialin 7-4 

set W1 network dialout 7-4 

set W1 network hardwired 7-4 

set W1 network twoway 7-4 

set W1 ofilter 7-10 

set W1 ospf 11-22 

set W1 protocol 7-5 

set W1 routing 7-9 

set W1 speed 7-18 

show all 3-21 

showarp 3-22 

show EtherO 3-23 

show files 3-24 

show filter 14-4 

show global 3-26 

show ipxroutes 3-28, 15-6 

show isdn 3-29 

show LineO 3-30 

show location 13-4, 13-26 

show memory 3-32 

show modem 6-41 

show modules 3-33 


shownetconns 3-34 
shownetstat 3-35 
show ospf areas 11-4 
show ospf links 11-6 
show ospf neighbor 11-8 
show pO 3-37 
show routes 3-36, 15-3 
show SO 3-37 
show sap 3-39 
show sessions 3-40 
show table 3-41 
show table filter 3-41, 14-4 
show table host 15-10 
show table location 13-4 
show table modem 6-40 
show table netmask 4-23 
show table snmp 4-27 
show table user 12-4 
show user 12-5 
show W1 3-37 

T 

telnet 3-12 
tftp get 3-16 
traceroute 3-9 

V 

version 3-3 
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Subject Index 



A 

access filter 6-30, 6-31 
access override 6-30 
accounting server 
RADIUS 4-20 

accounting server daemon 4-20 
adding 

DLCI to DLCI Table 13-27 
filter to Filter Table 14-5 
host to Host Table 15-11 
location to Location Table 13-5 
modem to Modem Table 6-42 
netmask to Netmask Table 4-25 
netuser to User Table 12-6 
SNMP host 4-30 

static route to IP Route Table 11-16, 15-5 
static route to IPX Route Table 15-7 
user to User Table 12-6 
administrative logons 
disabling 4-15 
enabling 4-15 
using serial ports 4-15 
administrative password 2-3 
advertising network routes 11-3, 11-13 
Annex-D polling interval 7-13 
area border router 11-12 
area password 11-17 
ARP tables for interface 3-22 
ASCII terminal 1-1 
assigned base address 4-10 
asynchronous 

access override 6-30 
autolog name 6-24 
baud rate 6-11 
carrier detect signal 6-18 


data bits 6-13 
destination address 6-35 
device 6-8 
device service 6-28 
dialback delay 6-25 
DTR idle 6-26 
extended mode 6-6 
hangup control 6-24 
hardware flow control 6-16 
hardwired network 6-11 
input filter 6-31 
IPX network 6-37 
local IP address 6-34 
login message 6-22 
login prompt 6-23 
login service 6-6, 6-27 
modem control 6-18 
modem pools 6-20 
modem selection 6-18 
MTU 6-36 

network service 6-10 
output filter 6-32 
parity checking 6-12 
port groups 6-20 
port idle time 6-20 
routing 6-37 
RTS/CTS 6-16 
security level 6-21 
software flow control 6-15 
stop bits 6-14 

TCP/IP header compression 6-38 
terminal type 6-30 
transport protocol 6-33 
two-way 6-9 
Xon/Xoff 6-15 

asynchronous port commands 
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description 6-5 
summary 6-3 
asynchronous port types 
description 6-5 
asynchronous ports 
configuring 6-1 
displaying data 6-1 
authentication 

CHAP 4-13 

PAP 4-12 

RADIUS 4-18 

RADIUS, alternate 4-19 
autolog name 6-24 

ComOS 

erasing 3-14 
version 3-3 

compression, header 6-38,12-16, 13-13 
console 3-15 

D 

data link connection identifier. See DLCI 
databits 6-13 

DCD. See carrier detect signal 6-18 
debugging 3-12 

from a terminal session 3-10 
hello packets 11-24 

B 

backbone area 11-12 
backup router 11-11 
baud rate 6-11 

BBS 6-26 

bidirectional communications 6-26 
broadcast routing 6-37 

ISDN 3-13 

link state acknowledgment packets 11-24 
link state update packets 11-24 

OSPF events 11-24 

PPP negotiations 3-14 
dedicated network connection 6-11 
default routing options 4-9 
deleting 

DLCI from DLCI Table 13-29 
filter from Filter Table 14-6 

c 

carrier detect signal 6-18, 7-17 
channel rate 10-9 

CHAP 

authentication 3-20, 4-13 
configuration 4-13, 13-20 

ChoiceNet 

authentication 4-21 
client configuration 4-21 
commands 4-21 
secret 4-22 
server 4-21 

server configuration 4-21 
shared secret 4-22 

Command Line Interface 
introduction to 2-1 
starting 2-3 

command line values, summary 2-5 

host from Host Table 15-11 
location from Location Table 13-6 
modem from Modem Table 6-43 
netmask from Netmask Table 4-26 

SNMP host 4-31 

static route from IP Route Table 15-6 
static route from IPX Route Table 15-8 
user from User Table 12-7 
designated router 11-11 
device designation 6-8, 6-9 
device service 

netdata 6-28, 8-4 

PortMaster 6-28, 8-4 
rlogin 6-28, 8-4 

Telnet 6-28, 8-4 
dial group 6-20 
dial script 13-14 
dialback delay 6-25 
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dialback login user 

telephone number 12-8 
dialback network user 
location 12-8 
dialback user login 6-25 
dial-in network 7-4 

connections 6-8, 6-9, 6-10 
dialing to a network location 3-7 
dial-out network 7-4 

connections 6-8, 6-9, 6-10 
directory number 9-7, 10-10 
disable security 6-21 
disconnecting a dial-in user 6-20 
DLCI 

adding to location 13-27 
deleting 13-29 
feature 13-27 
list 7-12, 7-13 
DLCI Table 

commands 13-26 
DNS 4-6, 4-7 

document conventions xxii 
domain name 4-7 
DTR idle 6-26 
DTR signal 6-24 
dropped 6-24 

E 

El channel groups 10-8 
El lines 

encoding method 10-7 
framing format 10-6 
grouping fractional 10-8 
pulse code modulation 10-7 
setting use 10-4 

erasing nonvolatile memory 3-14 
establishing login sessions 6-27 
Ethernet 

802.2 protocol 3-5, 5-7 
802.2_ii protocol 3-5, 5-7 

802.3 protocol 3-6, 5-7 


cabling 1-1 

configuration values 3-23 
configuring for OSPF 11-21 
II protocol 3-6, 5-7 
input filter 5-9 
IP address 5-8 
IPX address 5-8 
IPX network 5-6 
output filter 5-10 
RIP configuration 5-5 
routing 5-5 
Ethernet commands 
description of 5-3 
summary of 5-2 
Ethernet interface 
configuring 5-1 
displaying configuration 5-1 
exiting the command line interface 3-4 
extended mode 6-6, 7-4 
external routes, propagating 11-14 

F 

file statistics 3-23 
Filter Table 

displaying data 3-41 
saving changes 14-5 
Filter Table commands 
description 14-4 
summary 14-3 
filters 

adding 14-5 

configuring ICMP 14-12 
configuring IP 14-6 
configuring IPX 14-14 
configuring SAP 14-16 
configuring TCP 14-8 
configuring UDP 14-10 
creating, editing and deleting 14-1 
deleting 14-6 
displaying content 14-4 
displaying data 14-1 
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for dial-in locations 6-32 
for dial-out locations 6-32 
using in ptrace 3-9 
Flash RAM 3-3 
erasing 3-14 
fractional El 

enabling 10-4 
grouping channels 10-8 
fractional T1 

enabling 10-4 
grouping channels 10-8 
Frame Relay 7-5, 13-8, 13-27 

G 

gateway address 4-8 
general commands 3-1 
description 3-3 
summary 3-1 
global commands 
description 4-3 
summary 4-2 
global settings 3-26 
configuring 4-1 
displaying 4-1 

group number 6-20, 7-14, 13-12 
guide preview xx 

H 

hangup control 6-24 
hardware flow control 6-16 
hardwired network 7-5 
help commands 3-4 
high-water mark 13-20, 13-25 
host 

alternate 4-5 
default 4-5, 6-29 
device 6-29 
device service 4-5 
for login sessions 4-5 
login 6-29 


override parameters 6-17 
prompt 6-29 

host controlled device 6-8 
host name lookups 4-7 
Host Table 

adding host 15-11 
configuring 15-1 
deleting host 15-11 
displaying 15-1 
saving 15-10 

summary of commands 15-9 


I 

ICMP 

echo request packets 3-8 
time expired packets 3-9 
ICMP filter 

configuring 14-12 
idle time 6-20 
ifconfig 3-5 

in.pmd daemon 6-8, 6-27, 8-3 
input filter 

asynchronous 6-31 
Ethernet 5-9 
location 13-22 
synchronous 7-9 
user 12-17 

installing the PortMaster 1-1 
IP address 

asynchronous 6-34 
base 4-10 

ChoiceNet server 4-21 
default 4-5 
Ethernet 5-3 
gateway 4-8 
initial setup 1-2 
loghost 4-5 
network user 12-12 
pool 4-10 

RADIUS accounting server 4-20 
RADIUS authentication server 4-18 
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remote router 6-35 
reported 4-11 
synchronous 7-6 
IP broadcast address 5-4 
IP filter 

configuring 14-6 
IP netmask 

asynchronous 6-34 
Ethernet 5-4 
synchronous 7-7 
user 12-14 
IPX 

enabling support 4-13 
frame type 5-7 
NetBIOS 4-11 
protocol routing 3-20 
routes 3-28 
IPX filter 

configuring 14-14 
IPX network 

asynchronous 6-37 
Ethernet 5-6 
location 13-10 
setting 1-3 
synchronous 7-8 
user 12-14 
IPX Route Table 

adding routes 15-7 
deleting routes 15-8 
showing 15-6 
ISDN BRI commands 
description of 9-4 
summary 9-2 
ISDN BRI ports 
configuring 9-1 
displaying data 9-1 
displaying status 3-29 
ISDN PRI 

port data, displaying 10-1 
switch settings 10-5 
ISDN PRI commands 
description 10-4 


summary 10-3 
ISDN PRI line 

encoding method 10-7 
framing format 10-6 
pulse code modulation 10-7 
setup 10-4 
ISDN switches 

supported types 4-16, 9-4 


L 

listen routing 6-37 

Livingston technical support, contacting xxiv 
LMI polling interval 7-12 
Local Management Interface 7-12 
location 

automatic dial scripting 13-16 

CHAP configuration 13-20 

configuring 13-7 

destination address 13-9 

dial script 13-14 

displaying 13-26 

force voice call 13-19 

high-water mark 13-20 

idle time 13-21 

input filter 13-22 

IPX network 13-10 

maximum dial-out ports 13-25 

MTU 13-14 

multilink 13-24 

netmask 13-9 

output filter 13-23 

password 13-18 

port groups 13-12 

protocol 13-8 

routing 13-11 

showing 13-4 

TCP/IP header compression 13-13 
telephone number for dial-out 13-16 
username 13-17 
location password 13-18 
Location Table 
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adding locations 13-5 
configuring 13-1 
deleting locations 13-6 
displaying 13-1,13-4 
saving changes 13-5 
Location Table commands 
description 13-4 
summary 13-2 
loghost address 4-5 
login 

host 6-29 
message 6-22 
prompt 6-22, 6-23 
service 4-5, 6-6 

M 

Maximum Transmission Unit. See MTU 
MD5 authentication 11-18 
memory 3-32 
modem 

initialization string 6-42 
modem name 
long 6-42 
short 6-41, 6-42 
modem switch 10-9 
Modem Table 

adding modem 6-42 
configuration 6-40 
deleting modem 6-43 
displaying 6-41 
MTU 

asynchronous port 6-36 
location 13-14 
synchronous port 7-11 
user 12-19 

Multilink PPP 12-21,13-24 
Multilink V.120 12-21 

N 

name server 4-7 


name service, selecting 4-6 
negotiated address 12-12 
negotiation 4-11 
NetBIOS parameter 4-11 
netdata login service 6-27, 6-28 
netmask 

adding 4-25 
deleting 4-26 

hardwired asynchronous port 6-34 
hardwired synchronous port 7-7 
location 13-9 

network hardwired port 6-35 
saving configuration 4-24 
Netmask Table 

configuration 4-23 
showing 4-23 
network 

connections 3-34 

hardwired asynchronous port 6-31, 6-32 
routes 3-36 
statistics 3-35 
network hardwired port 
MTU 6-36 
netmask 6-34 
routing 6-37 
network service 6-10 
netdata 6-27 
PortMaster 6-27 
rlogin 6-27 
Telnet 6-27 
network type 
dial-in 7-4 
dial-out 7-4 
hardwired 7-4 
two-way 7-4 
NIS 4-6, 4-7 
nonvolatile memory 
erasing 3-14 
Novell NetWare 

Version 3.11 3-6, 5-7 
Version 4.0 3-5, 5-7 
null modem cable 1-1 
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online help 3-4 

Open Shortest Path First. See OSPF 
OSPF 

adding area 11-12 
advertising router 11-7 
asynchronous interface 11-22 
authentication key 11-4, 11-5 
configuring 11-1 
debugging 11-24 
deleting area 11-13 
displaying configured areas 11-4 
displaying information 11-1 
displaying neighbors 11-8 
displaying summary of links 11-6 
enable or disable 11-11 
Ethernet interface 11-21 
examples of ifconfig output 11-9 
external routes 11-6 
link ID 11-7 
location 11-23 
MD5 authentication 11-18 
priorities of designated and backup routers 
11-11 

range and type of route propagation 11-13 
RIP routing 11-20 
route propagation 11-13 
router ID 11-19 
saving changes 11-10 
stub area 11-14 
stub area default route 11-15 
synchronous interface 11-22 
transit area 11-14 
Type-2 external routes 11-20 
OSPF area 

default route 11-14 
network range 11-5 
OSPF commands 
description of 11-4 
summary 11-3 
output filter 


asynchronous 6-32 
Ethernet 5-10 
location 13-23 
synchronous 7-10 
user 12-18 


P 

PAP 

authentication 4-12 
configuration 4-12 
parallel port 

configuration 8-1 
device 8-3 
device service 8-4 
disabling 8-4 
disconnect timeout 8-6 
displaying configuration 8-1 
extended mode 8-3 
host 8-5 

parallel port commands 
description 8-3 
summary 8-2 
parity checking 6-12 
password 

setting administrative 4-3 
setting location 13-18 
setting user 12-8 
password, area 11-17 
permanent network connection 6-11 
ping 3-8 
PMconsole 

maximum connections 4-14 
PMlogin 3-10 
port idle time 6-20 
port session information 3-40 
PortMaster 

administrative password 2-3 
configurable ports by model 2-1 
in.pmd daemon 6-8, 8-3 
installation 1-1 
IP broadcast address 5-4 
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login service 3-10, 6-27, 6-28 
rebooting 2-5 
resetting ports 3-19 
setting up with PMconsole 1-3 
shared device 6-8 
system console 3-15 
system LEDs 1-2 
uptime 3-3 
PortMaster 3 

channel groups 10-8 
channel rate 10-9 
configuring 10-2 
displaying diagnostics 10-1 
enabling modems 10-9 
encoding method 10-7 
framing format 10-6 
line use 10-4 

port telephone number 10-10 
pulse code modulation 10-7 
switch type 10-5 
PPP 4-11 

asynchronous control map 6-39,12-20, 13-12 
configuration requests 3-13 
connections 6-36 
negotiated address 12-12 
protocol 6-33, 7-5, 12-11, 13-8 
printer port. See parallel port 
propagating external routes 11-14 
ptrace 3-9 


Q 

quitting the command line interface 


3-4 


R 

RADIUS 

accounting server 4-20 
authentication, primary 4-18 
authentication, secondary 4-19 
client configuration 4-18 
filters 6-32 


port-limit attribute 12-21 
security 6-22 
shared secret 4-19 
reboot 3-3 

related documentation xxi 
remote login 3-11 
reported IP address 4-11 
resetting ports 3-19 
RIP configuration 5-5 
RIP routing 11-20 
rlogin service 6-27, 6-28 
route gateway 4-8 
route propagation 11-13 
Route Table 

adding routes 11-16, 15-5 
deleting routes 15-6 
saving 15-4 
showing 15-3 
route, tracing 3-9 
routing options 4-9 

s 

SAP 

PortMaster information 3-39 
SAP filter 

configuring 14-16 
save command 3-17 
saving configurations 3-18 
script for dialing 13-14 
secret 

ChoiceNet 4-22 
RADIUS 4-19 
security 

enabling 6-21 
security level 6-21 

Service Advertising Protocol. See SAP 
Service Profile Identifier 9-6 
session time limit 12-23 
shared secret 

ChoiceNet 4-22 
RADIUS 4-19 
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show commands 
examples 3-20 
explanations 3-21 

SLIP 

connections 6-36 
notification 4-11 
protocol 6-33,12-11,13- 

SNMP 

configuration 4-27 
host, specifying 4-30 
parameters, saving 4-29 
read/write strings 4-29 
support, enabling 4-28 
SNMP Table 

displaying 4-27 
software flow control 6-15 
SPID number 9-6 
Static Route Table commands 
description 15-3 
summary 15-2 
Static Route Tables 
configuring 15-1 
displaying 15-1 
stop bits 6-14 
stub area 

default route to 11-15 
defining 11-14 
support, technical xxiv 
synchronous , 

Annex-D polling interval 7-13 
carrier detect signal 7-17 
destination address 7-7 
DLCI list 7-13 
extended mode 7-4 
hangup control 7-15 
input filter 7-9 
IPX network 7-8 
LMI polling interval 7-12 
local IP address 7-6 
modem pools 7-14 
modem selection 7-17 
MTU 7-11 


netmask 7-7 
network type 7-4 
output filter 7-10 
port groups 7-14 
port idle time 7-16 
protocol 7-5 
reference speed 7-18 
routing 7-9 

synchronous port commands 
description 7-3 
summary 7-2 
synchronous ports 
configuring 7-1 
displaying data 7-1 
syslog facility 

systefname parameter (sysname) 3-20 

T 

T1 channel groups 10-8 
T1 lines 

encoding method 10-7 
framing format 10-6 
grouping fractional 10-8 
pulse code modulation 10-7 
setting use 10-4 
TCP filter 

configuring 14-8 
technical support xxiv 
Telnet 

address 3-12 

setting administrative port 4-4 
Telnet login service 6-27, 6-28 
terminal type 6-30 
login 6-31 
two-way 6-31 

testing a location configuration 3-7 

TFTP 

retrieving file from host 3-16 

timeout value 

asynchronous ports 6-2U 
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